Personal data incident in Karlskrona

The [InfoSec] Stack - A podcast by Cleura

Categories:

This summer, Karlskrona municipality (Sweden), moved its email management to Microsoft 365. The rescue services in Karlskrona did not learn about the change until four months later, which is not entirely unproblematic. You see, the rescue service is part of Sweden's total defense, and in view of the fact that we have both a naval base and an air flotilla in Blekinge, this change entails a security risk. A risk that the rescue services in Karlskrona did not even have the opportunity to assess. The incident has now been reported to the Swedish Data Inspectorate as a personal data incident. https://www.blt.se/karlskrona/raddningstjansten-befarar-att-personuppgifter-kommit-i-fel-hander-anmaler-handelsen-b4449b80 (article in swedish) https://www.esamverka.se/download/18.1d126bc174ad1e6c39cac3/1542007824143/eSam%20-%20R%C3%A4ttsligt%20uttalande%20om%20r%C3%B6jande%20och%20molntj%C3%A4nster.pdf (in swedish)