<ul data-eligibleForWebStory="true">Scania, a Swedish automotive manufacturer, was hit by a cyberattack where hackers accessed sensitive customer data.The attack involved an external IT partner losing login credentials through an infostealer, which hackers used to access Scania and steal files.Hackers demanded money from Scania and later offered the stolen archive for sale on the dark web.A dark web forum ad claimed to be selling a database allegedly taken from 'insurance.scania.com' containing 34,000 files.Scania confirmed the breach originating from the external IT partner in late May 2025 as a supply chain attack.A perpetrator used leaked credentials to access an insurance system and downloaded documents related to insurance claims.The stolen files may contain sensitive information, and the number of affected individuals is currently unknown.The threat actor attempted to extort money from Scania but eventually offered the database for sale on the dark web.