The first post came just after 1:30 pm on Saturday.

After that, a swarm of more or less obscure messages was pumped out of several official Twitter accounts that belong to Swedish radio.

Claes Bertilson tells SVT that they "have a theory" about what has happened but otherwise do not want to comment on issues that they believe concern security.

- We are looking at what has happened and have made a police report.

But we do not comment on the ongoing security work, he says to SVT News.

Had you activated two-factor authentication on your accounts?

- I will not go into any details.

SVT has previously been in contact with several people who describe a weak safety culture.

"Just must not happen"

IT security expert David Jacoby sees some rational reasons to avoid answering the question of two-factor authentication and instead highlights the function as one of the utmost importance in a company's basic security work.

- If you have not activated two-factor on such a sensitive twitter account, it is remarkable.

This is something you should be aware of, it is a socially critical service and it just must not happen.

He also calls for transparency around what has actually happened:

- Building security is difficult and we must get the chance to learn from each other, even our mistakes.

We need to help each other not to make the same mistakes as our own.

SR accounts appear in leaked databases

A number of Swedish radio's e-mail addresses also appear in leaked databases on the internet.

There you can easily find both username and password.

Something that without two-factor authentication could be a possible way into both social media accounts and other functions.

- If this is the way in, via stolen usernames and passwords, then it is bad that you have not checked this before.

It is easy to follow up on this and is public.

You should know that.