https://pwnsy.com/tools/cyber-watch/sweden/Sourced cyber incidents and official statements, from pwnsy Cyber Watch.enSun, 08 Nov 2026 00:00:00 +0000https://www.ncsc.se/sv/aktuellt/eu-varnar-for-cyberincidenter/62d5aad2d87829adThu, 05 Nov 2026 00:00:00 +0000NCSC relayed EU coordination on refrigeration incidents since 11 October and urged firms to patch connected control systems.https://pwnsy.com/tools/cyber-watch/incidents/europe-supermarket-refrigeration-cyberattacks/3f10a284a525c6b3Tue, 03 Nov 2026 00:00:00 +0000On 2 November 2026 attackers changed fridge settings at shops, butchers and blood banks in at least nine European countries. No one has claimed it.https://pwnsy.com/tools/cyber-watch/sweden/#all2556eea05f7c10d6Mon, 02 Nov 2026 00:00:00 +0000Coop confirmed a cyber incident hit cooling at seven stores in Gävle and Sundsvall, which were on older 4G connections. Sources: https://www.nst.com.my/amp/business/corporate/2026/11/1569503/fridge-cyberattack-hits-supermarkets-across-europe, https://swedenherald.com/article/several-ica-stores-affected-by-overnight-refrigeration-and-freezer-problemshttps://pwnsy.com/tools/cyber-watch/sweden/#alldb8ad5b84992b09dMon, 02 Nov 2026 00:00:00 +0000Ica Kvantum Sjöbo said a cyberattack caused its cooling failure, and ICA Group said the affected stores were those using Danfoss systems. Sources: https://swedenherald.com/article/several-ica-stores-affected-by-overnight-refrigeration-and-freezer-problemshttps://www.ncsc.se/sv/aktuellt/cyberangrepp-mot-kylsystem/b74010acc2d6787fMon, 02 Nov 2026 00:00:00 +0000NCSC said it is following incidents hitting grocery refrigeration systems and is in contact with affected organisations.https://pwnsy.com/tools/cyber-watch/sweden/#alld6dd84b26cb735b7Fri, 25 Sep 2026 00:00:00 +0000Everest listed Securitas Group on its leak site, said all company data was encrypted and threatened a leak. Sources: https://www.dexpose.io/everest-ransomware-group-strikes-securitas-group/https://pwnsy.com/tools/cyber-watch/sweden/#alle84cfeb1f18c3d7aSat, 19 Sep 2026 00:00:00 +0000Emperador said it exported about 41 GB from an Electrolux Azure database and threatened to leak it. No company statement found. Sources: https://www.dexpose.io/emperador-ransomware-strikes-electrolux-group/https://pwnsy.com/tools/cyber-watch/sweden/#alld71cd94a7f3f861fTue, 02 Jun 2026 00:00:00 +0000Lapsus$ said it stole 180 GB of internal data including source code and architecture documents. The sample could not be independently verified. Sources: https://www.retaildetail.eu/news/home/hackers-claim-ikea-has-been-the-victim-of-a-major-data-breach/https://pwnsy.com/tools/cyber-watch/sweden/#allc26e0b296816737eWed, 15 Apr 2026 00:00:00 +0000Civil defence minister Carl-Oskar Bohlin disclosed a failed destructive attack on a heating plant in 2025. A built-in protection mechanism blocked it. Sources: https://techcrunch.com/2026/04/15/sweden-blames-russian-hackers-for-attempting-destructive-cyberattack-on-thermal-plant/https://pwnsy.com/tools/cyber-watch/sweden/#allb5960400105b19daThu, 09 Apr 2026 00:00:00 +0000An attack found on 9 April took down IT systems in both Västerbotten municipalities. Dorotea warned that personal data may have leaked. INC Ransom listed Dorotea on its leak site on 24 April. Sources: https://www.svt.se/nyheter/lokalt/vasterbotten/sa-skapar-it-attacken-problem-i-vilhelmina-och-dorotea, https://www.ransomware.live/id/RG9yb3RlYSBTd2VkZW5AaW5jcmFuc29thttps://pwnsy.com/tools/cyber-watch/sweden/#all8fac4821b467ec3bFri, 13 Mar 2026 00:00:00 +0000CGI said two internal test servers in Sweden were accessed and an older application version and its source code were exposed. Civil defence minister Carl-Oskar Bohlin confirmed the leak and said CERT-SE and the NCSC were involved. ByteToBreach said it leaked source code from e-government platforms used by Swedish agencies. Sources: https://cointelegraph.com/news/sweden-e-government-source-code-leak-cgi-sverige