Sweden's data privacy regulator, IMY, has fined IT systems provider Miljödata $183,000 (SEK 1.8 million) over a data breach that affected 2.2 million people. The incident occurred in August 2025, and IMY said the company's inadequate security measures were to blame.
The fine follows an investigation into the breach and reflects the regulator's finding that Miljödata failed to meet its security obligations. The scale of the exposure, affecting millions of individuals, made the case significant for the regulator.
For organizations handling large volumes of personal data, the case is a reminder that security failures can lead to financial penalties.