Medhelp is sentenced to pay millions after a personal data leak. However, the amount of the fine is reduced somewhat by the Administrative Court.

The Administrative Court has sentenced the company Medhelp to pay SEK 8.8 million in penalty fees after the high-profile data leak when personal data from hundreds of thousands of patients who contacted 1177 Vårdguiden was open online.

Medhelp’s subcontractor Voice is also convicted of the incident and must pay SEK 500,000 in penalty fees. In addition, the Stockholm Region will be fined SEK 500,000 and the Värmland Region will pay SEK 250,000. When the Integrity Authority IMY investigated the incident last year, they considered that Medhelp would pay a fine of 12 million while Voice would pay 650,000. The sanction fees for the regions that used Medhelp’s services were the same amount as the Administrative Court has now arrived at.

It was Computer Sweden that in 2019 discovered that a large number of audio files from calls to 1177 Vårdguiden could be accessed by anyone online. In total, there must have been around 2.7 million audio files. As the calls to 1177 Vårdguiden can be divided into several audio files, IMY estimated that it must have been 650,000 – 900,000 calls to 1177 Vårdguiden that were online.