Read news from:
Austria
SHARE
COPY LINK

TECH

Hacker attack against Swedish data centre knocks out cinema sales systems

A ransomware attack on Saturday against IT supplier Tietoevry's Swedish data centre has knocked out sales systems at Swedish cinema chain Filmstaden, and other retailers.

Published: 20 January 2024 17:37 CET
Hacker attack against Swedish data centre knocks out cinema sales systems
A hacker attack on Saturday 20th January, 2024 against IT supplier Tietoevry's Swedish data centre has knocked out sales systens at Swedish chains Filmstaden. Rusta and Granngården. Photo: Anders Wiklund / TT

Cinema chain Filmstaden cannot currently sell cinema tickets, snacks, soft drinks or sweets.

“We are investigating all the possibilities,” Helena Eklund of Odeon Cinemas Group, which owns Filmstaden, told Swedish news agency TT.

The outage at Filmstaden means that only people who have already bought a ticket can go to the cinema on Saturday.

Normally, cinemagoers are not allowed to bring their own drinks or snacks, but this rule has been waived because of the current situation.

The problems, which are affecting the whole country, also include Svenska Bio’s cinemas, but customers there can pay by Sweden’s mobile payment system, Swish. 

“Looking at alternatives”

According to Swedish daily Aftonbladet , the cause is a ransomware attack against Tietoevry, but it remains unclear how long it will take to get systems up and running again.

“We have not received any more clarity on how long it may take,” said Eklund on Saturday afternoon.

Eklund said the chain were “looking at alternatives”, but that it was “very difficult” to see what these might be as Filmstaden is dependent on the system that crashed.

“We do not have cash options, for example. But we are looking into all the possibilities if it were to drag on, which we really hope it doesn’t.

The company said they hadn’t yet looked at the financial consequences of this.

“Our focus is on those who want to visit the cinema but can’t and on taking care of everyone who has a ticket. But it’s clear, on the weekends there are tens of thousands of cinemagoers. It’s hard to say right now [what the financial impact might be], but it’s clear that it’s having a huge impact,” Eklund said.

Online shopping affected too

Cinema chains aren’t the only businesses affected either. 

More of Tietoevry’s customers are affected, including Swedish discount chain Rusta and Swedish gardening chain Granngården.

For Rusta, this means the website is down and that online shopping is not currently possible.

“We are following the development and seeing how it goes for our operating supplier to get everything up and running again, Rusta spokesperson Cecilia Gärdestad said.

Granngården has closed all its shops because the checkout system is not working. However, customers can still shop online.

“Like Rusta and some other clients of Tietoevry, we are affected by the same problem. Together with Tietoevry, we are working to understand the extent [of the problem] and, of course, solve it,” sales manager Fredrik Björk told Aftonbladet.

Tietoevry told TT that it could not currently comment on the attack.

“All efforts at this time are focused on investigating and mitigating the effects,” the company said in an email.

 

Member comments

Log in here to leave a comment.
Become a Member to leave a comment.
For members

POLITICS IN SWEDEN

Why Sweden’s Chat Control vote is causing parliamentary chaos

Sweden's government last week rushed a controversial EU internet surveillance proposal through a parliamentary committee, opening the way for it to be voted through by the European Council. What's going on?

Published: 24 June 2024 14:08 CEST
Why Sweden's Chat Control vote is causing parliamentary chaos

What happened last week? 

After more than nine months of silence on Chat Control, the informal name given to the EU’s proposed “Regulation to prevent and combat child sexual abuse”, the government last Tuesday rushed a compromise proposal drawn up by the Belgian presidency through the Swedish parliament’s Justice Committee.

The representatives for the Green Party and the Left Party – both of whom are opposed to the measure – then somewhat mysteriously backed the government’s position without leaving a dissenting opinion. 

With only the Centre Party and the far-right Sweden Democrats opposing, Sweden’s government could then claim parliamentary backing for supporting the Belgian compromise at a planned meeting of the EU Council on Thursday. 

“Now our judgement is that an important step has been taken,” Justice Minister Gunnar Strömmer told TT in a written statement on Tuesday. “The government is therefore ready to take the next step and allow the EU Council and the Parliament to begin negotiations.” 

Sweden Democrat MP Adam Marttinen pointed out that both the Moderate and Liberal parties had criticised the proposal during the EU election campaign, saying that they would not push forward with the proposal, only to do so days after the election was over. 

“I think that was dishonest with voters,” he told TT. 

The Chat Control proposal was, however, not discussed as expected at the EU meeting meeting on Thursday, raising questions over whether it can be handled by the EU Council during the Belgian presidency. 

What is Chat Control? 

The proposal was put forward by Ylva Johansson, the European Commissioner for Home Affairs, in 2022. It aims to combat child pornography by forcing all encrypted messaging services operating in the EU to build in an “upload moderation” system or “backdoor” into their programmes.

This will allow all images and videos to be scanned for child sex abuse material before they are encrypted and sent to the recipient. 

The check would start with images and messages which have already been flagged as child pornography, but it would also look out for new abuse material. 

Users would have to give the messaging service they are using permission to scan their messages, and be stopped from sending videos or images if they do not give it.

The earliest proposal, from 2022, envisaged giving the upload moderation system the power to scan all messages, but the scope of the law has now been limited to image and video files. 

How would it work? 

That is unclear. One option is for the moderation system to be installed on each device used to send messages. Another is for the unencrypted message to first be sent to a cloud server for checking. Both are technologically tricky. 

“No one knows exactly how this would be done. There’s no technical description yet and that’s perhaps what is most frightening, that they are making laws and rules without knowing how they can be safely implemented,” Måns Jonasson, an expert at the Swedish Internet Foundation, told the TT newswire. 

Why is it criticised? 

Critics argue that by removing the possibility of having end-to-end encrypted communication within the EU, at least for ordinary, non-tech-savvy citizens, the law threatens to sharply circumscribe EU residents’ right to privacy. 

“How can this scanning be done in a safe way?” Jonasson asked. “If I take a picture of my children at the beach will I suddenly get flagged up by police for sending abuse material? Would teenagers sending naked pictures to one another also get flagged up? There are a thousand questions that haven’t been answered, and that’s even before you starting talking about whether it’s reasonable that all citizens’ mobile telephones and all images should be under surveillance by the police.”  

A risk, he said, was that once encrypted services had compulsory backdoors in place, authorities and potentially even hackers might use it for other purposes. 

“There are good examples of this. When you build in this kind of back door then it ends up being used by bad actors,” he said. 

And the group of people most likely to find a way to evade the controls, he said, were paedophiles. 

“If you’re a paedophile, you want to hide your activities so if you know that certain apps are being surveilled, then you’re obviously going to use other apps, so the question is why we should do it at all if it’s only those of us who are innocent who are going to be affected.” 

Why did the Green Party and Left Party MPs go against their own party lines? 

That is the mystery. The Green Party initially claimed that Rasmus Ling, the MP on the committee, had simply made a mistake. 

“In hindsight, we should have left a dissenting opinion, but we didn’t. It was a mistake. It is human to sometimes make mistakes,” the Green MP Rebecka Le Moine, who sits on the Swedish parliament’s EU committee, told TT.

“There are two separate versions, the Council’s compromise proposal, which is so general in its text that we cannot back it at all. Then there is a proposal that the Green group in the EU parliament have developed, which we back.” 

But internal messages obtained by the freelance journalist Emanuel Karlsten seemed to show that this was not the case, and that Ling knew exactly which version he was backing, and made a judgement that the compromise solved some of the issues the party had had with the original proposal. 

The Left Party representative, Gudrun Norberg, also claimed to have made an error. 

“It is true that I did not register a dissenting opinion at the committee meeting. That was a mistake and I truly regret it,” she wrote on Facebook. “It did not affect the result of the meeting and the question on Chat Control is far from fully determined. It will come before the [Swedish] parliament’s EU Committee, among other bodies, further on in the decision process.”   

What happens next? 

What last week’s decision does is open the way for Sweden to back the Belgian government’s compromise proposal in the EU Council, which – now that France has opened up to supporting the proposal – means there is no longer a blocking minority of countries in the EU Council of Ministers. 

This will theoretically allow the EU Council to take a collective position on the proposal, meaning negotiations can start with the EU Parliament. 

But, according to Karlsten, last Thursday’s meeting may have been the last chance for Belgium, which currently holds the EU Presidency, to put the measure forward, meaning the responsibility may now pass to Hungary. 

Politics in Sweden is The Local’s weekly analysis, guide or look ahead to what’s coming up in Swedish politics. Update your newsletter settings to receive it directly to your inbox. 

SHOW COMMENTS