Switzerland Archives

System Outage at Freight Division of Swiss Post in Germany

April 17, 2025

Swiss Post suffered a cyberattack in its freight logistics division in Germany. The division has been unable to access its IT systems, or has only partial access. Investigations show that a targeted cyberattack is the cause of the system outage. Local logistics, accounting, and HR systems are affected. Data records from the period 2020–2025 were stolen in the cyberattack. The division adjusted workflows and temporarily increased staffing levels as part of an established emergency plan. Approximately 1,600 business customers who use Swiss Post Cargo Germany’s warehousing and transport services are affected.

Swiss Post’s information security department is working intensively with local experts to stabilize the systems. Swiss Post’s systems in Switzerland are not affected.

Cyberattack Impacts Retail Stores of Swiss SPAR Handels AG

March 14, 2025

The supermarket chain Spar has been hit by a cyberattack. ATMs are malfunctioning. The goods ordering system has also been affected, and management is deploying cyber specialists. “Dear customers, unfortunately we have to inform you that we are the victim of a cyberattack,” Spar announced on its website on Saturday. “It may also happen that some products are temporarily unavailable in our stores.”

“Initial analyses have shown that the systems are extensively affected and the EC devices in the branches are not working.” Payments in the stores are currently only possible via Twint or cash.

Swiss Global Solutions Provider Ascom Confirms Cyberattack

March 16, 2025

Swiss global solutions provider Ascom has confirmed a cyberattack on its IT infrastructure. HellCat hacking group claimed the attack and told BleepingComputer that they stole about 44GB of data that may impact all of the company’s divisions. Ascom says that the hackers compromised its technical ticketing system, the incident had no impact on the company’s business operation

Ascom is a telecommunications company with subsidiaries in 18 countries focusing on wireless on-site communications.

Production Disrupted at Swiss Metal and Plastic Component Manufacturer

March 2, 2025

Adval Tech, an industrial conglomerate, has fallen victim to a cyberattack. The attack forced the company to shut down its IT systems worldwide as a precautionary measure. Production disruptions are expected at various locations. Adval Tech is working diligently with internal and external cybersecurity experts and relevant authorities to restore operations and resume business activities as soon as possible.

Small Swiss Dairy Farmer Refuses to Pay Ransomware

November 20, 2023

A farmer from the Swiss canton of Zug became the target of a ransomware attack. The exact target of the attack was a milking robot. The robot, responsible for milking the animals, suddenly no longer received data. he milking robot records and stores all relevant data for each individual cow. The hackers, who remain unknown to this day, demanded 10,000 dollars (8,500 Swiss francs) from Bircher.

The machine also collected data about when individual cows had been inseminated. Since Bircher refused to pay the ransom, he was denied access to this data. Later, complications arose with one of the cows and she had to be put down.

Birchermade two serious mistakes: he had neither backups nor an emergency plan. At least the milking systems were not completely dependent on the computer, so the farmer was able to continue milking his cows.

Widespread Fallout after Cyberattack hits Italy’s National Railway Company

March 23, 2022

Italian State Railways (FS) and its subsidiaries Trenitalia and Italian Rail Network (RFI) suffered a major ransomware attack on March 23 . The attack severely impacted ticketing systems, passenger information displays, and internal communications.

FS implemented emergency measures, allowing passengers to purchase tickets on trains without penalties. The primary focus was on restoring critical systems and minimizing further disruption to passenger services. Freight transport by rail was temporarily suspended for 24 hours. Reportedly affecting FS, Metrans Rail of Czech Republic, HUPAC of Switzerland and Lineas of Belgium.

Metrans Rail of Czech Republic shutdown their Italian operations for 24 hours the following day. They stated it was temporarily not possible to cross the border at Austria and Slovenia. Marc Jansen, director of operations at carrier Hupac, said trains have been standing still for 24 hours. Arno van Deursen, Country Manager Lineas NL said “Our trains to and from Italy have been standing still for about 15 hours”.

Elements were found on the computer network of Trenitalia and RFI that could be linked to a cryptolocker infection. Italian authorities, including the Postal Police’s National Cybercrime Center (Cnaipic) and the National Cybersecurity Agency (Acn), launched a joint investigation.

Cyberattack on the Swiss Media Log-in Platform Onelog

October 23, 2024

A cyber attack on the Swiss media log-in platform Onelog resulted in login issues for numerous online portals, affecting over 40 media companies, including Tamedia, Ringier, and SRG. The attack disrupted access to content and commenting functionality, prompting media houses to make their content temporarily freely accessible. The incident highlights the vulnerability of centralized login platforms and the need for robust cybersecurity measures to protect against such attacks.

Ransomware Attack at Nexus Telecom, Switserland

January 17, 2024

The ransomware gang 8Base has allegedly stolen “a large amount of confidential information” from Nexus Telecom. The victim supplies network monitoring software to providers worldwide.

CEO Marco Rhyner confirmed on Wednesday that Nexus Telecom had been affected by a cyber attack. He was unable to comment on the stolen data or the extent of the damage. Apparently, investigations are still ongoing.

Ransomware Attack at Swiss BKW Building Solutions Group

April 1, 2024

At the beginning of April, the Swisspro companies belonging to the BKW Building Solutions Group became the target of a cyber attack. The company confirmed this when asked by inside-it.ch. “Ransomware was discovered in Swisspro’s old IT environment,” wrote the BKW media office. “The current operational IT environment of both Swisspro and the other BKW companies is not affected. Despite the incident, Swisspro is able to provide services to customers,” it is emphasized.

Massive Cyberattack at Regional Swiss Broadcasting Company

May 22, 2024

Since Tuesday afternoon, there have been irregularities or disruptions in the online, radio and television offerings of Radio and Tele Top. Not all programs can be broadcast as announced and some have to be repeated, the top media wrote on their website.

According to Gjusi Brändli, RadioTop’s program director, the attack is massive and they are also being blackmailed. The technicians are currently working around the clock to get the program back on track. The radio and TV programs are running on emergency mode. It will probably take a few more days until things are back to normal, said Brändli.

“Nothing works anymore in the Radio and TeleTop system!

An encryption Trojan is currently affecting large parts of the Radio and Tele Top systems. Nevertheless, it is said that “an almost normal program” was able to be broadcast. Experts are on the trail of a solution to the problem.

« Older Entries