Mörbylånga Municipality

Profile narrative

Mörbylånga Municipality is a local government authority responsible for administering public affairs in the town of Mörbylånga and its surrounding area in Sweden. It provides a range of essential services to residents, including primary education, social welfare, childcare, and elderly care. The municipality also manages communal infrastructure such as roads, public transportation, water supply, electricity distribution, and waste collection. These functions are carried out in accordance with Swedish municipal law and national policy frameworks.

According to reports of a cyber incident in December 2022, the municipality’s services support approximately 25,000 residents. This figure reflects the scale of the population that relies on the municipality’s daily operations for essential needs. The size places Mörbylånga among the smaller municipalities in Sweden, serving a predominantly rural and semi‑urban community. Consequently, its operational footprint is concentrated within a defined geographic region rather than a large metropolitan area.

A distinguishing characteristic of Mörbylånga Municipality is its participation in a shared IT environment with at least one neighboring municipality. This joint information‑technology platform was highlighted during the December 2022 cyberattack, when unauthorized access disrupted services across both entities. The shared system aims to improve efficiency and reduce costs by centralizing certain digital functions. The incident underscored the interdependence of the municipalities’ digital infrastructure and the potential ripple effects of a security breach.

Mörbylånga Municipality is owned and governed by the locally elected municipal council, which acts as the governing body under Swedish law. It does not appear to have a parent company or subsidiary structure, operating as an autonomous public sector entity. Funding is derived primarily from local taxes and state grants allocated to municipalities.

Following the 2022 cyberattack, external cybersecurity responders assisted in containment efforts, and the municipality anticipated a recovery period of several days. The attack prompted a crisis declaration and led to temporary reliance on manual processes for services such as healthcare and utility management. These events have since informed ongoing reviews of the municipality’s cybersecurity posture and emergency response planning.

Incidents

1 incident linked to this organisation.