Cyber Incident Victim: Careium AB
Date:
Mar 2023
Location:
Sweden
Summary
A cyberattack disrupted all of Careium's safety alarm systems in Sweden, causing operational outages before critical functions were restored. The company identified and prioritized system repairs, reactivating alarm services with initial delays in response times. While core alarm functionality was maintained through direct communication with municipal customers—enabling crisis plan activation—full restoration required ongoing technical investigation. Careium's primary focus remains investigating the incident's details and supporting affected users and caregivers. Municipalities received continuous updates throughout the disruption.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 3 techniques |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On March 23, 2023, Careium experienced operational disruptions affecting all safety alarm systems across its Swedish customer base. The company identified the incident as a cyberattack and initiated technical recovery efforts. By 18:30 that same evening, Careium restored prioritized system functions, bringing safety alarms back online. During the outage, the company maintained partial service functionality by continuing to inform municipal authorities about incoming alarms, though early evening users experienced longer response times. Careium's technical team worked to locate the source of the problem while simultaneously restoring critical operations. The company engaged in continuous communication with municipal customers throughout the disruption period, enabling local authorities to activate their crisis preparedness plans accordingly.
Careium confirmed the operational impact extended to all safety alarm units serviced by the company in Sweden. Municipalities served as primary points of contact for end-users during the incident. While core alarm notification functionality persisted, the cyberattack disrupted normal system operations until partial restoration occurred approximately within the same business day. Careium's immediate priorities following service restoration included further investigation into the attack's specifics and supporting care recipients and municipal clients. The company deployed an experienced technical team to conduct detailed forensic analysis of the incident. No additional system disruptions were reported following the 18:30 restoration, though comprehensive investigation into the attack's origin and full scope remained ongoing at the time of the public statement. Careium committed to providing continuous updates as new information became available through established investor relations channels.