Attack on Service Provider Affects Ericsson

March 20, 2026

INCIDENT

A service provider for Ericsson Inc. suffered a cyberattack last April where personally identifiable information from Ericsson fell into the hands of the threat actor.
Ericsson said it holds personal data for employees and customers and, from time to time, shares this information with the company’s service providers. Ericsson sent a letter out to victims notifying them of data security incident that occurred at one of its services providers, which ma involved personal information.
“On April 28, 2025, our service provider became aware of a suspicious event that may have involved potential unauthorized access to certain data on their system,” the company said in a letter to victims. “It promptly initiated an investigation with the assistance of external cybersecurity specialists. It also notified the Federal Bureau of Investigation and implemented measures to enhance security and minimize the risk of a similar incident occurring in the future.”

Incident Date

April 17, 2025

Estimated Cost

Unknown at this time

Victims

Type of Malware

No Malware identified

Threat Source

No threat source identified