In December 2025, Grund, a nursing home in Iceland, fell victim to a cyber attack that resulted in breachers accessing sensitive personal data of tens of thousands of past and present clients and employees. The perpetrators managed to infiltrate the nursing home’s servers, copying critical health information and care-related data before the breach was detected, which raises serious concerns about data security and privacy in healthcare facilities.

Karl Óttar Einarsson, speaking to Vísir, confirmed the extensive nature of the breach, revealing that the hackers obtained data stretching back several years. This significant compromise of personal information includes not only client health records but also details about the care services provided at the homes, thus potentially impacting the lives of many individuals associated with Grund.

The incident highlights the vulnerabilities within the healthcare sector to cyber threats, emphasizing the need for improved cybersecurity measures. Given that Iceland has relatively few facilities impacted by such breaches, there is a growing demand for stronger protocols and systems to protect sensitive health information in order to avoid the consequences of such data leaks in the future.