Subj : Sweden power grid confirm
To   : All
From : Mike Powell
Date : Tue Oct 28 2025 09:03 am

Sweden power grid confirms cyberattack, ransomware suspected

Date:
Tue, 28 Oct 2025 12:02:00 +0000

Description:
Everest is claiming responsibility and says it stole hundreds of gigabytes of
files.

FULL STORY

Svenska kraftnt, Swedens national grid operator, has confirmed suffered a
ransomware attack and a data breach, and is now being extorted for money. 

In a short announcement published on its website, the firm said it was now
investigating, to find out what information has leaked and how it might 
affect us. 

We see no indications that the power system is affected, Cem Gcgren, Head of
Information Security at Svenska kraftnt, said in a machine-translated
statement.

Everest 

Svenska kraftnt is Swedens national grid operator, a government agency
responsible for maintaining and operating the countrys electricity
transmission system. 

Our current assessment is that mission-critical systems have not been
affected, Gcgren said. At this time, we are not commenting on perpetrators or
motives until we have confirmed information. 

While it did not discuss who the threat actors were, what type of files they
stole, or how much money they are demanding in return, The Record found a
group called Everest had claimed responsibility on the dark web, saying it
stole around 280 GB of internal files, without going into any specific
details. 

Everest is a known ransomware organization, but it does not have an image of 
a dangerous group. 

In fact, it became a laughing stock of the cybersecurity community after
breaking into Mailchimp in 2024, as it stole such a small batch of company
data (around 767 MB of information). 

One person shared their thoughts on social media, describing the breach as
affecting like, one customer, while the other commented the breach was,
probably 300 milliseconds worth of mailchimp data. Likely a client of a
clients emails were leaked. 

Everest is not a state-sponsored group, but since its members speak Russian,
security researchers believe the group is located there. 

======================================================================
Link to news story:
https://www.techradar.com/pro/security/sweden-power-grid-confirms-cyberattack-
ransomware-suspected

$$
--- SBBSecho 3.28-Linux
 * Origin: capitolcityonline.net * Telnet/SSH:2022/HTTP (1:2320/105)

.