[CLSTR]
< Back to situations

Monitor this situation.

[SITUATION] · [ACTIVE] · [TECHNOLOGY]

3 clusters · 8 sources · 10 days · First seen · Last updated

Cyberattacks on Swiss pension funds and providers

Overview

A cyberattack targeting PK Softech AG, an external software provider, has led to data breaches affecting multiple Swiss institutions. The incident was initially identified through its impact on the federal pension fund Publica, where sensitive information such as wage data, pension assets, and contact details may have been exposed. Publica confirmed that while personal data was potentially compromised, pension assets and ongoing operations remained secure.

The scope of the breach expanded as it was confirmed that the pension funds for the City of Zurich (PKZH) and Swiss Post were also affected. For PKZH, stolen data may include names, addresses, dates of birth, AHV numbers, and IBANs. Swiss Post reported that while assets are safe, personal data such as social security numbers may have been compromised.

In a related development, the ransomware group Safepay claimed responsibility for an attack on the logistics specialist DD-Automation, releasing data that included a folder labeled ‘Armasuisse’. The Swiss military stated that this folder does not contain critical data.

Recent reports confirm that the late September cyberattack on PK Softech potentially compromised data for numerous pension funds utilizing the company’s software. Stolen information may include contact details, account numbers, social security numbers, salaries, and information regarding spouses. Publica is currently investigating the extent of the breach with the assistance of federal experts.

Entities

Publica · PK Softech AG · DD-Automation · ArmaSuisse · Swiss People's Party (UDC)

Timeline

  1. [POLITICS] 2 sources
    Swiss political criticism and major data breach reported

    Social Democratic Party co-president Mattea Meyer criticized the UDC's leadership, while a cyberattack on PK Softech has potentially compromised data for Swiss pension funds, including Publica.

  2. [TECHNOLOGY] 2 sources
    Cyberattacks impact Swiss pension funds and logistics providers

    Cyberattacks on Swiss software providers have led to data breaches at the City of Zurich and Swiss Post pension funds, while a ransomware attack on logistics firm DD-Automation exposed files related to Armasuis

  3. [TECHNOLOGY] 6 sources
    Publica pension fund faces data breach via software supplier

    A cyberattack on software provider PK Softech AG has potentially exposed sensitive personal and wage data belonging to members of the Swiss federal pension fund Publica.

Sources

cash.ch · generation-nt.com · ictjournal.ch · inside-it.ch · letemps.ch · lfm.ch · shn.ch · webdisclosure.com

This summary has been updated 1 time: see revision history