I would love to hear politicians and government officials seriously discuss the fact that they are obviously incapable of keeping data secure. Every piece of data they demand from us will inevitably be leaked.

According to reports, the leaked material includes source code, passwords, and encryption keys tied to systems supporting BankID logins for the Swedish Tax Agency.

BankID is not a niche tool as it serves as the backbone of Sweden’s digital infrastructure.

More than 8.6 million people in a country of just over 10 million rely on it for daily life, creating what critics warn is a dangerous single point of failure.

The Swedes are apparently very efficient:

Sweden’s BankID system has long been promoted as a model for efficiency, allowing citizens to access nearly all services through a single login.

But, don't worry, folks: it was taken down:

Shortly after it was leaked on Breached, the site was taken offline as part of a cybersecurity operation, limiting independent verification of the full scope of the hack.

However, it’s unclear how much of the data was sold before the site was taken down.

I just love this part. Apparently it was only test servers that, for some reason, had customer data on them.

CGI confirmed the breach but characterized it as limited in scope, claiming it involved only internal test servers.

“The incident concerns two internal test servers in Sweden,” the company said.

“The servers are not used in production but are used for testing, connected to a service for a limited number of customers.”

CGI also stated that the attackers accessed an older version of the source code and insisted there was “currently no indication of any impact on customers’ production environments, production data, or operational services. Information to the contrary is not accurate.”

The only solution is not yo collect the data on the first place.