Personal data from Miljödata published on the internet

“If you are contacted by individuals or companies that you've not had previous contact with, we urge extra vigilance. Employees are also asked to be extra aware regarding emails asking them to change their passwords,” says Katarina Lindholm, HR manager at Örebro University.

According to Miljödata's investigation, no sensitive information, such as medical certificates or medical treatment plans, were leaked. Individuals with protected identities remain anonymous in these systems, and their personal data stays confidential, despite the data leak. Even confidential addresses have been specifically protected and remain inaccessible. Students are unaffected by the leak.

During the weekend of 23–24 August, Miljödata was subjected to a cyberattack, during which the perpetrators gained access to data from Swedish municipalities and universities, among others.

Örebro University has used Miljödata’s Adato system, mainly for recording sick leave. Adato stores personal data of individuals who are, or have been, employed at Örebro University.

According to Miljödata’s investigation, the following information has been leaked.

• Name
• Personal identification number
• Gender
• Contact details
• Number of sick days

“All those employed at Örebro University are included in the leak. This also includes many previous employees. Even though most of the information is public, this is obviously a very serious matter,” says Katarina Åkerling Lindholm.

The incident has already been reported by the university to the Swedish Data Protection Authority (IMY) and the Swedish Civil Contingencies Agency (MSB). A police investigation is underway.

If you are a current or former employee of Örebro University and have questions about this matter, please contact adatofragor@oru.se.