HELSINKI (AP) — Sweden's prime minister says a security leak in the transport agency two years ago was "a disaster," but it's unclear what damage it may have caused.

Stefan Lofven says the data leak was revealed after security police investigated the outsourcing of services by the Swedish Transport Agency and found IT workers in other countries, including the Czech Republic, were not given normal security checks.

The leak was first reported on last week.

Lofven told reporters Monday that he heard about the leak in January 2016 and that the leadership of the agency had been replaced. He said the head of the agency "had stepped outside" the law but declined to speculate on what damage the leak may have caused, saying security and military officials would now assess the situation.