The RansomHouse ransomware group claims to have breached the Swedish Arts Council (Kulturrådet). The Swedish Arts Council is a government agency under the Ministry of Culture, responsible for allocating state funding to the cultural sector and promoting cultural development in Sweden. Its operations span literature, music, performing arts, and international cultural exchange initiatives like Creative Europe.
In a statement published on their dark web leak site, the RansomHouse group alleged that they had been waiting for the agency to engage in negotiations, accusing the Council’s IT department of attempting to “conceal the incident.” The group has listed the agency’s data status as “Encrypted” as of October 31, 2025, and currently marks the evidence pack as available for download.
According to the actor, the compromised data includes a significant volume of internal files. Based on the file directory listings provided as evidence, the allegedly compromised data includes:
-
Meeting Protocols: Minutes and protocols from internal meetings (Protokoll AMK).
-
Financial Documents: Offers, quotes, and diagrams (Offert Diagram och Rapport, Offertmall).
-
Administrative Decisions: Formal decisions regarding specific cases or inquiries (Beslut efter särskild…).
-
Strategic Reports: Documents outlining internal strategies and results (Resultatet av Puls, Strategiskt bibliotek).
-
Program Catalogs: Publications and catalogs related to children and youth literature (Barn-och-ungdomsbokskatalogen).
-
Employee/Stakeholder Names: Files containing names of specific individuals (Loza Fernandez, Betina, Khanmohammadi, Niusha).
