Due to the recent cyberattack on Miljödata, a supplier to Boliden, we regret to inform that personal data belonging to current and previous employees has been leaked to unauthorized parties. The affected systems are Adato (support system for rehabilitation cases) and Novi (support system for HR personnel notes).
Miljödata has confirmed that the attacker (the one who carried out the cyberattack) has seized information from the Adato and Novi systems. It has also been confirmed that the attacker has disseminated the information further by publishing it on the Darknet.
Examples of the data involved include names, phone numbers, personal identification numbers, employee numbers, email addresses, information about sick leave, and whether a rehabilitation case is registered. Please note that there is no indication that rehabilitation plans, health details such as medical certificates, union membership details, notes made by managers, or information about the reasons for rehabilitation plans are part of the affected information.
As the leak and the further dissemination pose an increased risk to people affected, we urge you as a previous or current Boliden employee to be particularly vigilant about suspicious emails and SMS messages and not to click on attached files or links from senders you do not recognize. You should also be extra vigilant about various types of identity intrusions, both digitally and physically. You can read more about identity intrusions on the Swedish Tax Agency's website.
Boliden has reported the incident to the Swedish Data Protection Authority (IMY).
Boliden is closely monitoring this matter and is in close contact with the supplier Miljödata. If you have any general questions regarding this information, please contact [email protected].
We regret the occurrence of this incident and the concern it may cause. It is important to us that you feel secure about how information about you is handled. We take this very seriously and are evaluating both short-term and long-term measures to maintain very good information security.