Executive summary – Data Breach

On August 19, 2024, an incident occurred where data from SMS-Teknik was accidentally exposed on the internet during a routine exercise to restore a copy of the production database. The exposure lasted for 19 minutes and resulted in the deletion of the copy, as well as a ransom note being left by the attackers who gained access to the system.

SMS Teknik shut down the exposed computer as soon as the intrusion was discovered. The incident has been reported to the Swedish Authority for Privacy Protection (IMY) and the Police, and our customers have been informed. A forensic investigation, in collaboration with an external party, has been conducted.

The investigation shows that the 19 minutes the attackers had access to the system were not sufficient to download all the data. Only a limited amount of data was taken with the intent of carrying out a ransom campaign.

Since the incident, SMS Teknik has implemented extensive security measures to minimize the risk of future data breaches. We deeply regret the concern and inconvenience this incident may have caused our customers. We also want to thank you for the support we have received during this time.