Publica pension fund faces data breach via software supplier

A cyberattack on PK Softech AG, an external software provider for the Swiss federal pension fund Publica, has resulted in a potential leak of sensitive personal data. The breach, which was detected in late September, may have exposed confidential information including wage data, pension assets, retirement amounts, and contact details.

Publica has confirmed that while personal data may have been compromised, the pension assets of its insured members and retirees remain secure. The attack has not impacted ongoing operations, and pension payments continue as usual. The Swiss Federal Prosecutor has launched an investigation into the incident.

PK Softech AG reported that unknown actors gained access to part of its IT infrastructure using malware despite high security standards. The company has since disconnected the affected environment and engaged external specialists. Publica is currently informing its approximately 70,000 insured members and 41,600 retirees about the breach and has advised individuals to remain vigilant against suspicious communications.