Shared municipal IT intrusion disrupts services in Borgholm and Mörbylånga

An intrusion originating in Mörbylånga municipality’s mail server compromised a shared IT environment used by Mörbylånga and Borgholm. After abnormal data transfers were detected on December 12, both disconnected their networks, interrupting email, online public services and parts of local healthcare administration; staff used manual contingencies. Later investigation dated initial entry to November 16.