Regulatory updates
Third-party breach affects Scania
June 18, 2025 | Breach, Third-party
Swedish commercial vehicle maker Scania confirmed in mid‑June 2025 that it was hit by a cyberattack stemming from a late‑May breach at an external IT partner. Hackers, using stolen credentials from an “infostealer” malware, accessed its insurance.claims system on May 28–29 and downloaded thousands of documents—including potentially sensitive personal, financial, and medical data—before demanding a ransom. The attackers, known by handles like “hensi,” tried extortion via email, then began offering the 34,000‑file archive for sale on a dark‑web forum. Although Scania has taken the affected application offline and notified authorities, neither the full scope nor number of impacted individuals has been disclosed.
https://www.scworld.com/brief/data-breach-confirmed-by-scania