The Swedish Transportstyrelsen (Transport Agency) botched its outsourcing to IBM, uploading its records to IBM's cloud and then emailing cleartext copies to marketing managers, unvetted IBM employees in the Czech Republic and others.



The database contains the names, photos and home addresses of all drivers/car owners in Sweden, and exposes the home addresses of the country's spies, people in witness relocation programs, people on police registries, and "type, model, weight, and any defects in all government and military vehicles, including their operator."

One agency employee, former director general Maria Ågren, was fired and fined, seemingly in connection with the breach.

The breach occurred in 2015, was detected in 2016, and has only just come to the public sphere.

The database is still hosted in IBM's cloud, and the earliest it could be locked down is this autumn.