[REVISION HISTORY]

Cyberattacks on Swiss pension funds and providers

Updated 1 time since CLSTR started tracking revisions of this situation.

What changed

2026-10-16 14:23 UTC → 2026-10-18 11:02 UTC · added ~~removed~~

A cyberattack targeting PK Softech AG, an external software provider, has led to data breaches affecting multiple Swiss institutions. The incident was initially identified through its impact on the federal pension fund Publica, where sensitive information such as wage data, pension assets, and contact details may have been exposed. Publica confirmed that while personal data was potentially compromised, pension assets and ongoing operations remained secure. The scope of the breach expanded as it was confirmed that the pension funds for the City of Zurich (PKZH) and Swiss Post were also affected. For PKZH, stolen data may include names, addresses, dates of birth, AHV numbers, and IBANs. Swiss Post reported that while assets are safe, personal data such as social security numbers may have been compromised. In a related development, the ransomware group Safepay claimed responsibility for an attack on the logistics specialist DD-Automation, releasing data that included a folder labeled ‘Armasuisse’. The Swiss military stated that this folder does not contain critical data. Recent reports confirm that the late September cyberattack on PK Softech potentially compromised data for numerous pension funds utilizing the company’s software. Stolen information may include contact details, account numbers, social security numbers, salaries, and information regarding spouses. Publica is currently investigating the extent of the breach with the assistance of federal experts.

Versions

Only revisions since CLSTR began indexing content versions appear here. Select a version to see what changed compared to the one before it.