Cyberattacks impact Swiss pension funds and logistics providers

A series of cyberattacks targeting external software providers has impacted several Swiss institutions. The pension funds for both the Swiss Post and the City of Zurich (PKZH) have been affected following an attack on PK Softech AG.

For the City of Zurich pension fund, it has been confirmed that insured persons' data was stolen, though pension assets and benefit payments remain secure. The data breach may include names, addresses, dates of birth, AHV numbers, contact details, and IBANs. The PKZH has filed a criminal complaint.

The Swiss Post pension fund is still investigating the extent of the impact, noting that while pension assets are safe, personal data such as contact information and social security numbers may have been compromised. Authorities have warned individuals to remain vigilant against fraudulent emails, SMS, or phone calls.

In a separate but related development, the ransomware group Safepay claimed responsibility for an attack on DD-Automation, a logistics specialist based in Aesch. The group released data that included a folder labeled ‘Armasuisse’. However, the Swiss military stated that the folder does not contain any critical data.