- MonitoringMonitoring
Questions and answers about the current situation
What happened?
Älvdalen Municipality recently conducted a new risk assessment of our permissions in their IT environment, something that municipalities should regularly do for all their suppliers. The new assessment identified that we had too high permissions in their environment and therefore they chose to shut down our services last Friday.As a precautionary measure, Karlstad also chose to temporarily shut down services to give us time to analyze the situation and review our permissions.
Have there been any breaches or data leaks?
No. There has been no breach of Haldor's services, and we have not identified any security holes or data leaks.Has Haldor changed any permissions?
We only have the permissions in a customer's IT environment that they have approved for us to have. Our access looks different for each customer, partly depending on which features the customer has approved and how their environment is set up.
Our permissions at Älvdalen and Karlstad have not changed since they were approved by the respective customer. The level of our permissions can only be changed by the customer themselves in their IT environment.
Could other customers be affected?
All of our customers have different IT environments and have approved different features with us. This means that our permissions vary from customer to customer, and that each customer needs to make their own risk assessments based on their specific environment and the features they have chosen to use.Risk assessments need to be revised over time, which is part of active security work. IT environments and content change over time, and then previously accepted risks can be assessed differently in a new risk assessment. This is what happened in Älvdalen.
What is Haldor doing to resolve the situation?
We are actively working with Älvdalen and Karlstad to ensure that they can continue to use our services.We also offer all our other customers the opportunity to book a meeting with us to provide a shared overview of our permissions and access to data.
What should I do if I have questions?
Do you have any questions or concerns? You are always welcome to contact us at support@haldor.se and we will help you. - IdentifiedIdentified
Due to Älvdalen shutting down Haldor's services:
There has been no breach of Haldor's services, nor have we identified any security vulnerabilities or data leaks from Haldor. Our services continue to operate as approved by you as a customer.
Haldor Education (Main service) - Operational
Haldor Guardians - Operational
Haldor Guardians
Haldor Analysis and Follow-up - Operational
Haldor Analysis and Follow-up