SDR Confirms Data Breach After Ransomware Attack; No Payment to Hackers
Event summary
- SDR, a subsidiary of North Media A/S, confirmed a data breach following a ransomware attack on July 2, 2026.
- Stolen data includes personal information of current and former employees, such as names, email addresses, phone numbers, national IDs, and salary details.
- SDR has not paid the ransom demand and is working with North Media’s IT security experts and external specialists to mitigate the incident.
- The company has informed affected employees and set up a contact function for further guidance.
The big picture
This incident highlights the growing threat of ransomware attacks on media companies, where sensitive employee data is increasingly targeted. North Media’s refusal to pay the ransom aligns with a broader industry shift toward resisting cyber extortion, but the long-term reputational and operational risks remain significant.
What we're watching
- Cybersecurity Response
- How SDR and North Media will strengthen their IT defenses following the breach.
- Regulatory Scrutiny
- Whether the incident triggers further investigations or penalties from Integritetsskyddsmyndigheten (IMY).
- Operational Impact
- The pace at which SDR can restore full trust among employees and stakeholders after the breach.