Suspected ransomware attack knocks out Swedish municipality's IT systems
Svedala municipality in southern Sweden shut down its digital systems after what officials believe was a ransomware attack, forcing care services to switch to paper-based backups.
Svedala municipality in southern Sweden shut down all its digital systems overnight on Thursday after discovering what officials believe was a ransomware attack, council director Johan Lundgren said, according to SVT Nyheter. Someone had broken into the municipality's IT systems and attempted to access information, he said.
"We have had a breach of the systems, what appears to be a so-called ransomware attack," Lundgren said. As a precaution, the municipality shut down all digital systems and switched to backup procedures, he said.
It is too early to say what information may have leaked from the municipality, Lundgren said. "We are mapping the scope and have not yet received any demands for a ransom from anyone," he added.
Some municipal digital services were down on Thursday, and care and welfare services switched to analogue backup procedures, SVT Nyheter reported. The municipality can still be reached by phone, and a temporary backup website with current information is running, Lundgren said.
Svedala declared a crisis situation after the suspected attack, Expressen reported. "Without speculating on who, what or how, this is an attack from outside," Lundgren told regional radio station P4 Malmöhus. The municipality said it had no timeline for when the problems would be fixed.
Within home care and elderly care, the council director said operations were running reasonably well under the circumstances, despite the switch to analogue procedures. Expressen reported that an AI-generated audio version of its article carried a standard disclaimer that errors may occur, separate from the facts of the council director's own account.
What we know
- Svedala municipality shut down its digital systems overnight after what officials believe was a ransomware attack.
- No ransom demand had been received as of Thursday, council director Johan Lundgren said.
- Care and welfare services switched to analogue backup procedures.
- It is unclear whether sensitive data was accessed or leaked.
Not yet confirmed
- Whether sensitive information from the municipality's systems has been accessed or leaked has not been confirmed.
Why it matters for Europe
Local governments across Europe have increasingly become targets of ransomware attacks that disrupt essential services such as care for the elderly. Svedala's shift to paper-based backups shows how quickly a cyberattack on municipal systems can affect vulnerable residents who depend on digital record-keeping for their care.
The municipality has not said how long it expects the disruption to last, and officials are still working to establish the scope of the breach and whether any personal data was exposed. Until that assessment is complete, residents are being directed to a temporary backup website and a phone line for current information, rather than the council's usual digital services.
Sources
Reported by 2 reports from 2 independent outlets in 1 countries.
Intelligence file
PremiumSee how we verified this story
Confidence and impact scores, the full situation report and the event timeline.
Launch offer: free for members until 31 October 2026
Questions and answers
- What happened in Svedala?
- The Swedish municipality shut down its digital systems after officials said they believed it was hit by a ransomware attack.
- Has a ransom been demanded?
- No. As of Thursday, the municipality said it had not received any ransom demand.
- How are services being affected?
- Some digital services are down, and care and welfare services have switched to analogue backup procedures.
This article was written with AI assistance from 2 verified reports and checked under the ECTV editorial policy. Spotted an error? Request a correction.