Ericsson Discloses Data Breach Affecting 15,661 People

Ericsson Inc., the U.S. subsidiary of Swedish telecommunications giant Telefonaktiebolaget LM Ericsson, disclosed a data breach that exposed personal information belonging to 15,661 employees and customers. The incident occurred at an unnamed third-party service provider and was detected on April 28, 2025, following unauthorized access to certain files between April 17 and April 22, 2025.

The breach came to light when the service provider identified suspicious activity on its systems. Ericsson stated that the compromise did not involve its own infrastructure but rather a vendor responsible for storing employee and customer data. In notifications filed with U.S. state authorities, including the attorneys general of California, Texas, and Maine, the company detailed the scope of the exposure. A comprehensive review of affected files, completed on February 23, 2026, with the help of external cybersecurity specialists, confirmed that sensitive information had been accessed or acquired without authorization.

Among the potentially compromised data were names, addresses, Social Security numbers, driver's license numbers, government-issued ID numbers, financial details, medical...