A contract is signed
The Swedish Transport Agency outsources the IT maintenance of its vehicle- and driver’s license register to IBM, which later takes over the operation of the Agency’s IT system.
Deviating from the law
The Transport Agency’s director-general, Maria Ågren, decides to deviate from several laws: the Swedish Security Protection Act, the Personal Data Act and the Publicity and Secrecy Act.
The deviations from the law are noted internally but the Transport Agency’s board ignores the internal auditor’s warnings about the outsourcing. Over the summer, the Swedish Security Service, Säpo, launches a review of the IT operations transfer.
The Security Service recommends an immediate halt of the outsourcing, but in December IMB takes over the IT operations.
A preliminary investigation
The Transport Agency’s director-general Maria Ågren is subject to a preliminary investigation and is suspected of careless handling of confidential information.
19 JANUARY 2017
The director-general is fired
Maria Ågren is forced to leave her post as director-general of the Transport Agency. The reasons for her resignation are not made clear.
28 JUNE 2017
Ågren is fined
Maria Ågren admits to having committed a crime and accepts the penalty of SEK 70,000 in fines.
6 JULY 2017
Newspaper Dagens Nyheter reveals that Ågren had admitted to committing a crime. According to the prosecutor, the crime was committed between September and March 2015. A stream of revelations now emerges in Swedish media. For instance, when the Transport Agency outsourced its IT operation to IBM, companies in Eastern Europe whose staff lacked security clearance took over responsibility for the Agency’s database. The database contained information about all vehicles in Sweden, including police and military vehicles.
14 JULY 2017
More revelations and resignations
It transpires that Transport Agency chairman Rolf Annerberg knew about the legal breaches but did not take any measures.
Details about the sensitive information contained within the database emerge. For instance, information about the routes of armoured vehicles, classified company information, details of Swedish infrastructure, and more. The database also contained information that makes it possible to trace individuals with protected identities. When that was discovered, the individuals were identified once more in an open email sent to the Eastern European companies. p>
15 JULY 2017
Ministers reported to the constitutional committee.
Mikael Oscarsson of the Christian Democrat Party reports the Social Democrat infrastructure minister Anna Johansson. Two days later, Prime Minister Stefan Löfven is reported, too.
18 JULY 2017
Minister blames the Transport Agency
Infrastructure minister Anna Johansson announces that chairman of the Transport Agency’s board, Rolf Annerberg, has to go and that other board members who knew about the breach of security rules will leave, too. Johansson says the government was informed about the events in the Spring of 2016 and then determined that the authority had dealt with the issue. The government did not act at that point. Instead, all blame is placed on the Transport Agency.
23 JULY 2017
A first statement from the prime minister
In a written comment, Prime Minister Stefan Löfven calls the scandal a shambles and says that the government has ensured that the affected authorities “have taken the necessary measures in order to limit the damages”.
24 JULY 2017
The defence minister knew for over a year
Defence Minister Peter Hultqvist announced that he had known about the situation since March 2016.
24 JULY 2017
The prime minister was informed late
Stefan Löfven says he was informed in January 2017.
25 JULY 2017
Ministers questioned by parliamentary committees
Defence minister Peter Hultqvist tells the parliamentary defence committee that he ensured that appropriate measures were taken after he was informed about the IT scandal. Home Affairs Minister Anders Ygeman tells the justice committee that he believed he handled the information appropriately.
26 JULY 2017
The opposition demands three ministers’ resignations
The centre-right Alliance want a vote of no confidence against the defence minister, the home affairs minister and the infrastructure minister.
27 JULY 2017
Löfven reshuffles his government
Anders Ygeman and Anna Johansson resign while Hultquist remains as defence minister. Helene Fritzon takes over as migration minister and assistant justice minister instead of Morgan Johansson, who takes over the domestic affairs portfolio. Tomas Eneroth becomes the new infrastructure minister. Helene Fritzon takes over as migration minister. Minister for Public Health Gabriel Wikström quits for health reasons and Minister for Social Affairs Annika Strandhäll takes over his tasks
28 JULY 2017
The constitutional committee wants to bring its inquiry forward
Chairman Andreas Norlén of the Moderate Party wants to launch the inquiry over the summer because “the security crisis is a large an important issue”.
14 AUGUST 2017
The constitutional committee demands information from Säpo
The constitutional and defence committees hold extra meetings. The constitutional committee decides to request material from Säpo’s preliminary investigation and demands that the cabinet office answers a number of questions.
27 AUGUST 2017
Löfven’s state secretary resigns
The prime minister’s right hand, Emma Lennartsson, resigns and tells newspaper Dagens Nyheter that she “made a mistake”, admitting that she should have grasped the seriousness of the information that Säpo had accounted for at two separate meetings that she took part in at earlier dates than she had previously claimed.
30 AUGUST 2017
The prime minister speaks
In his first comments to the press since his closest aide stepped down, Prime Minister Stefan Löfven maintains that he did not know anything about the scandal until January this year. He stresses that the responsibility for the security breech lays with the Transport Agency.