Sentenced for data breach in 129 patient records

The data breach took place between November 2022 and May 2023 in the health care digital record system Cosmic. The searches concerned both the convict's own records and a large number of other patients' data.

The person has admitted the acts and stated that it was done out of curiosity, without connection to the work. According to the judgment, the information has not been shared with anyone else.

Detected during log checks

The crime was discovered at Region Östergötland's log checks. The District Court assesses that the recognition is supported by, among other things, log data and the region's internal investigation.

Each of the 36 plaintiffs receives SEK 8,000 in compensation for infringement, a total of SEK 288,000, plus interest. The court considers that the intrusion into the confidential medical records was a serious violation of the patients' personal integrity.