Major cyber security incident disrupts Swedish retailer Dustin, takes systems offline

Swedish online technology retailer Dustin reported a major data security incident that forced several of its systems offline and disrupted its operations.

 

Headquartered in Nacka, Sweden, Dustin is a leading online IT solutions provider and reseller serving businesses, public-sector organisations, and consumers across the Nordic and Benelux markets. Dustin has evolved into a major e-commerce provider, offering around 280,000 technology products and services while helping businesses improve their IT infrastructure and digital operations.

 

In a data security incident notice on its website, Dustin said that it recently identified unauthorised access within its internal network. The IT solutions provider immediately launched an investigation, with assistance from external cyber security experts, to determine the nature and scope of the incident.

 

It also took steps to contain the incident, secure the affected network and notified relevant law enforcement authorities about the same.

 

“The incident is considered serious and measures have been taken to limit the effects of the incident, including a temporary shutdown of certain systems,” Dustin said.

 

Dustin said its investigation into the incident remains ongoing, and the company has not yet determined what data may have been compromised. It is working with leading IT security and forensic experts to assess the potential impact. The system shutdown also disrupted the company’s ability to place and receive orders.

 

The IT solutions provider has submitted an initial notification regarding the potential personal data breach to Sweden’s data protection authority and reported the incident to the relevant government authorities.

 

“We are working intensively together with external experts to investigate the cause and extent of the incident. In parallel, we are working hard to safely re-open all systems,” Dustin added.

 

In a recent update, Dustin Group said it has started the phased restoration of affected systems, following a controlled and secure approach aimed at minimising customer disruption. The company added its complete order process is now operational, enabling customers to submit orders via phone and email. Meanwhile, efforts are underway to restore the company’s website and customer portals as soon as possible.

 

No known threat actor claimed responsibility for the cyber attack at the time of publication. Dustin Group also did not share details regarding the perpetrators, the exact volume of exfiltrated data, and whether a ransom demand was made.