cyber.hendryadrian.com
Cyber Attack & Data Breach · darkwebinformer.com

ByteToBreach Claims Leak of Sweden’s E-Government Source Code From CGI Sverige Infrastructure

· Original article ↗

Summary

ByteToBreach claims it obtained Sweden’s e-government platform source code from compromised CGI Sverige infrastructure. The listing reportedly includes staff data and credentials; the actor is also said to be selling citizen PII and electronic signing documents.

Key points

  • ByteToBreach claims the platform source code was taken from compromised CGI Sverige infrastructure; the article provides no independent confirmation.
  • The leak listing reportedly includes staff databases, API document-signing systems, Jenkins SSH credentials, RCE test endpoints, and initial-access artifacts.
  • The actor reportedly described a Jenkins compromise, Docker escape, SSH key pivots, and reconnaissance and SQL pivot techniques.
  • The source code was reportedly released for free, while citizen PII and electronic signing documents are being offered for sale separately.
  • The actor reportedly cited earlier breaches and attributed the alleged compromise to CGI infrastructure.

Article Details

Victim Organization
CGI Sverige AB infrastructure was allegedly compromised; Sweden’s E-Government platform was affected
Incident Type
Alleged infrastructure compromise and source-code and data leak
Data Types Exposed
  • E-Government platform source code
  • Staff database information
  • API document-signing system information
  • Jenkins SSH pivot credentials
  • Citizen PII
  • Electronic signing documents
Affected Data Size
The full source code was reportedly released; no data volume was stated.
Operational Impact
ByteToBreach emphasized critical impact on Swedish government services; no service disruption was independently confirmed in the supplied content.
Ransom Or Extortion
The source code was reportedly released for free, while citizen PII and electronic signing documents were being sold separately, according to the article.
Claim Status
claimed

MITRE ATT&CK

T1021.004 · SSHThe leak listing describes SSH private-key pivots; this is reported as a claimed attack technique, not independently confirmed.T1611 · Escape to HostThe leak listing describes a Docker escape from a Jenkins user in the Docker group; this is reported as a claimed attack technique, not independently confirmed.

Threat Actors

ByteToBreachPublished the source-code leak and claimed it came from compromised CGI Sverige AB infrastructure; the article also reports that citizen PII and electronic signing documents were being sold separately.

Vendors

CGIByteToBreach leaked the full source code of Sweden’s E‑Government platform, claiming it was harvested from a heavily compromised CGI Sverige AB infrastructure.

Products

JenkinsThe actor also exposed staff databases, API signing systems, Jenkins SSH pivot credentials, RCE endpoints, and is selling citizen PII and electronic signing documents separately.

Countries

SwedenByteToBreach leaked the full source code of Sweden’s E‑Government platform, claiming it was harvested from a heavily compromised CGI Sverige AB infrastructure.

Industries

GovernmentByteToBreach leaked the full source code of Sweden’s E‑Government platform, claiming it was harvested from a heavily compromised CGI Sverige AB infrastructure.

Related Articles