Bleepingcomputer

Data Breach Exposes Personal Information of Nearly 17,000 Volvo Employees

First seen 10 Feb 2026, 23:12 UTC • Theregister

+1 •24.3

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

Volvo Group North America reported an indirect data breach resulting from a cyberattack on Conduent, a service provider managing workforce benefits. Approximately 16,991 employees had their personal data exposed, with the breach confirmed in a filing with the Maine Attorney General. The incident was discovered by Volvo in late January 2026.

How this analysis works

Timeline

2026-01-31

Volvo learns of data exposure from Conduent systems

2026-02-10

Volvo publicly discloses the data breach

Attack Flow

13 entities, 30 inferred relationships (STIX 2.1).

Technique (3)

Data Breach
Ransomware
T1041 - Exfiltration Over C2 Channel

Organization (6)

Conduent
Mack Trucks
Miljödata
Volvo Cars
Volvo Group
Volvo Group North America

Threat Actor (4)

DataCarry
DataCarry Ransomware Group
Safepay
SafePay Ransomware Crew

Relationships

DataCarry uses Data Breach
DataCarry uses Ransomware
DataCarry uses T1041 - Exfiltration Over C2 Channel
DataCarry Ransomware Group uses Data Breach
DataCarry Ransomware Group uses Ransomware
DataCarry Ransomware Group uses T1041 - Exfiltration Over C2 Channel
Safepay uses Data Breach
Safepay uses Ransomware
Safepay uses T1041 - Exfiltration Over C2 Channel
SafePay Ransomware Crew uses Data Breach
SafePay Ransomware Crew uses Ransomware
SafePay Ransomware Crew uses T1041 - Exfiltration Over C2 Channel
DataCarry targets Conduent
DataCarry targets Mack Trucks
DataCarry targets Miljödata
DataCarry targets Volvo Cars
DataCarry Ransomware Group targets Conduent
DataCarry Ransomware Group targets Mack Trucks
DataCarry Ransomware Group targets Miljödata
DataCarry Ransomware Group targets Volvo Cars
Safepay targets Conduent
Safepay targets Mack Trucks
Safepay targets Miljödata
Safepay targets Volvo Cars
SafePay Ransomware Crew targets Conduent
SafePay Ransomware Crew targets Mack Trucks
SafePay Ransomware Crew targets Miljödata
SafePay Ransomware Crew targets Volvo Cars
DataCarry related to Volvo Group
DataCarry related to Volvo Group North America

Continue Reading

Multiple Critical Vulnerabilities Exploited in SonicWall and SharePoint Systems Langflow IDOR Exploit and Critical Vulnerabilities Targeting AI Platforms Ransomware Fuels Surge in Global Cyberattacks Conduent Suffers Data Breach from Ransomware Attack Conduent Data Breach Affects Millions of Americans Data Breaches Affecting Millions of Patients Reported

Data Breach Exposes Personal Information of Nearly 17,000 Volvo Employees

Article Content

Timeline

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading