[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fKHNsUjriSwjGwNaKSJoU9cf5WhmNkQn84e0FrDYLJnI":3},{"article":4,"iocs":49,"watch_terms":56,"solutions":57,"lesson":147},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":26,"category":27,"article_tags":31},"fe9aae0f-becc-4b14-be5f-918e41e5bf46","Sweden fines Miljödata $183,000 over breach affecting 2.2 million","sweden-fines-miljodata-183-000-over-breach-affecting-2-2-million-9a8c2d","Sweden's data privacy regulator, IMY, has imposed a $183,000 (SEK 1.8 million) fine on IT systems provider Miljödata for inadequate security measures leading to a breach in August 2025 affecting 2.2 million people. [...]","Sweden's data privacy regulator, IMY, has fined IT systems provider Miljödata $183,000 for inadequate security measures that led to a data breach in August 2025. The breach affected 2.2 million people, exposing sensitive personal data including identity numbers and health information. IMY found Miljödata failed to adequately check new software and lacked real-time monitoring, violating GDPR Article 32(1).","Sweden fines Miljödata $183,000 over data breach affecting 2.2 million people.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fsweden-fines-milj-data-183-000-over-breach-affecting-22-million\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2025\u002F08\u002F27\u002Fsweden.jpg","2026-09-22T21:40:37+00:00","2026-09-22T22:00:22.668881+00:00",8,[17,20,23],{"name":18,"type":19},"Miljödata","vendor",{"name":21,"type":22},"work environment and HR management systems","product",{"name":24,"type":25},"Datacarry","threat_actor","c5c77cdb-f7d7-4990-9436-c81dcbff1163",{"id":26,"icon":28,"name":29,"slug":30},null,"Policy","policy",[32,37,42,44],{"category":33},{"id":34,"icon":28,"name":35,"slug":36},"2e06f76c-d5b9-4f54-9eef-4d3447b10730","Breaches","breaches",{"category":38},{"id":39,"icon":28,"name":40,"slug":41},"3f0f8451-91df-4b6c-9a73-ef3b2509b7f1","GDPR","gdpr",{"category":43},{"id":26,"icon":28,"name":29,"slug":30},{"category":45},{"id":46,"icon":28,"name":47,"slug":48},"d95477d7-eb04-4fad-a2dc-be1428040ce7","Privacy Fines","privacy-fines",[50,53],{"type":51,"value":24,"context":52},"malware","Dark web name used by threat actor publishing stolen data",{"type":51,"value":54,"context":55},"1.5 Bitcoin","Ransom demand amount",[18,21],{"controls":58,"vendors":146},[59,88,117],{"slug":60,"name":61,"problem":62,"products":63},"patch-management","Automated patch management","Known holes get closed in days, not months.",[64,72,80],{"vendor_slug":65,"vendor_name":66,"vendor_logo":67,"product_slug":68,"product_name":69,"url":70,"description":71},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"vendor_slug":73,"vendor_name":74,"vendor_logo":75,"product_slug":76,"product_name":77,"url":78,"description":79},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"vendor_slug":81,"vendor_name":82,"vendor_logo":83,"product_slug":84,"product_name":85,"url":86,"description":87},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",{"slug":89,"name":90,"problem":91,"products":92},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[93,101,109],{"vendor_slug":94,"vendor_name":95,"vendor_logo":96,"product_slug":97,"product_name":98,"url":99,"description":100},"huntress","Huntress","\u002Fvendor-logos\u002Fhuntress.png","managed-edr","Huntress Managed EDR","https:\u002F\u002Fwww.huntress.com\u002Fplatform\u002Fmanaged-edr","Endpoint detection and response monitored around the clock by Huntress analysts.",{"vendor_slug":102,"vendor_name":103,"vendor_logo":104,"product_slug":105,"product_name":106,"url":107,"description":108},"bitdefender","Bitdefender","\u002Fvendor-logos\u002Fbitdefender.png","gravityzone","GravityZone","https:\u002F\u002Fwww.bitdefender.com\u002Fen-us\u002Fbusiness\u002Fgravityzone-platform\u002F","Endpoint protection, detection and response platform.",{"vendor_slug":110,"vendor_name":111,"vendor_logo":112,"product_slug":113,"product_name":114,"url":115,"description":116},"eset","ESET","\u002Fvendor-logos\u002Feset.png","eset-protect","ESET PROTECT","https:\u002F\u002Fwww.eset.com\u002Fint\u002Fbusiness\u002Fsolutions\u002Fendpoint-protection\u002F","Endpoint protection platform with detection and response add-ons.",{"slug":118,"name":119,"problem":120,"products":121},"security-monitoring-siem","Security monitoring (SIEM)","Logs from everywhere end up in one place, with alerts that someone actually sees.",[122,130,138],{"vendor_slug":123,"vendor_name":124,"vendor_logo":125,"product_slug":126,"product_name":127,"url":128,"description":129},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","cortex-xsiam","Cortex XSIAM","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fcortex\u002Fcortex-xsiam","AI-driven security operations platform that centralises security data, detection, automation and response for the SOC.",{"vendor_slug":131,"vendor_name":132,"vendor_logo":133,"product_slug":134,"product_name":135,"url":136,"description":137},"elastic","Elastic","\u002Fvendor-logos\u002Felastic.png","elastic-security","Elastic Security","https:\u002F\u002Fwww.elastic.co\u002Fsecurity","SIEM and endpoint security built on Elasticsearch, with open detection rules.",{"vendor_slug":139,"vendor_name":140,"vendor_logo":141,"product_slug":142,"product_name":143,"url":144,"description":145},"guardsix","Guardsix","\u002Fvendor-logos\u002Fguardsix.png","guardsix-siem","Guardsix SIEM","https:\u002F\u002Fguardsix.com\u002Fproduct\u002Fsiem","SIEM with automation, developed and hosted in Europe.",[],{"slug":148,"title":149,"body":150,"framework_refs":151,"framework_notes":163},"miljdata-fined-183k-after-breach-exposes-22-million-records-due-to-poor-monitoring-and-software-vett","Miljödata Fined $183K After Breach Exposes 2.2 Million Records Due to Poor Monitoring and Software Vetting","Miljödata's failure to adequately vet new software before deployment and the absence of real-time monitoring created the conditions for a large-scale breach affecting 2.2 million individuals, exposing highly sensitive data including national identity numbers and health information. This case illustrates that security controls must be proactive — not reactive — especially when handling special categories of personal data under GDPR. The regulator's finding under GDPR Article 32(1) underscores that 'appropriate technical measures' is a legal obligation, not a best-practice suggestion. IT providers handling sensitive citizen data at scale carry an amplified responsibility, as a single failure in their environment can cascade across millions of people.",[152,153,154,155,156,157,158,159,160,161,162],"GDPR Article 32(1) — Appropriate technical and organisational security measures","GDPR Article 33 — 72-hour breach notification to supervisory authority","GDPR Article 35 — Data Protection Impact Assessment (DPIA)","NIST SP 800-53 SI-3 — Malicious Code Protection","NIST SP 800-53 AU-6 — Audit Record Review, Analysis, and Reporting","NIST SP 800-53 RA-5 — Vulnerability Monitoring and Scanning","CIS Control 7 — Continuous Vulnerability Management","CIS Control 8 — Audit Log Management","CIS Control 16 — Application Software Security","ISO\u002FIEC 27001:2022 A.8.8 — Management of technical vulnerabilities","ISO\u002FIEC 27001:2022 A.8.16 — Monitoring activities",{}]