In Aftonbladet comments from CGI they seem to think that no production related data has been leaked:
https://www.aftonbladet.se/nyheter/a/ArvG0E/cgi-sverige-uppg...
As if it ever happened that a breached company admitted immediately that they've just been fucked.
But a copy of production data in the test environment isn't production data... It's test data! :)