August 23, 2024
Swisscom has apparently fallen victim to a major DDoS attack. According to its own statements, it was able to defend itself successfully after initial problems.
Swisscom said its experts fend off cyber attacks every day. But Friday’s attack was a major one. The company did not know who was behind it.
August 9, 2024
The machine manufacturer Schlatter has fallen victim to a cyber attack, disrupting IT network and communications. The company immediately initiated security measures and involved the relevant authorities, the group announced. The attack was noticed on Friday, August 9. The group was investigating whether data was stolen and experts were working to make all systems available and functional again, Schlatter said.
CEO Werner Schmidli confirmed to ‘Netzwoche’ that he had received a ransom demand. “We found a blackmail letter on the servers.” Schmidli did not say whether Schlatter plans to respond to the demand.
The company is already preparing the market for significantly lower annual results than last year. This is partly due to the necessary postponement of projects in the welding department.
April 15, 2024
The disruption has impacted more than 150 plasma centers in the US, with possible effects on European factory operations.
The BlackSuit ransomware gang took credit for the attack on Wednesday, claiming to have exfiltrated business and laboratory data as well as the information of both living and deceased donors.
May 23, 2023
On May 23, the Play ransomware group claimed it attacked Xplain – a Swiss IT firm providing services to several federal agencies in the country. The ransomware group leaked the files it stole from the company on June 1, which it claimed included 907 GB of financial and other data.
In March, 2024 SWI news reports that federal passwords and classified information were stolen in the >2023 cyberattack
May 21, 2021
The Siegfried Group suFfered a cyber attack shortly before Pentecost. THe Swiss company shut down production at multiple sites, cut off network connections, and scoured its information technology systems. Among other things, Siegfried packages the Pfizer-BioNTech COVID-19 vaccine.
As a result of the attack, there will be certain volume and revenue shortfalls in the first half of the year. Based on the results of the forensic investigations, which are well advanced, the Siegfried Group continues to assume that no sensitive customer data were affected by the incident.
February 24, 2023
The Rosenbauer Group is currently the target of a cyber attack. As a precautionary measure, parts of the IT infrastructure were switched off. The measures affect all Rosenbauer locations. The Rosenbauer Group is one of the world’s three largest manufacturers of fire-service vehicles and firefighting equipment.
The exact extent and duration of the attack as well as its consequences cannot yet be estimated. An immediately established task force is working with external cybersecurity experts and data forensics to restore system operations safely and as quickly as possible. According to current knowledge, neither customer nor company data was stolen or encrypted. The responsible authorities were called in.
The LockBit 3.0 ransomware group listed the company as one of its victims.
April 8, 2023
Bobst, the Vaud-based machine manufacturer, suffered two targeted cyberattacks over Easter weekend, Emergency measures had to be taken to protect critical IT systems by isolating them. This resulted in production, customer service and research and development operating in degraded mode.
Work gradually resumed at the group’s various global sites between April 12 and 18, while the systems were reconnected. The calmer holiday period helped smooth out the impact.
April 5, 2023
Swiss-based Bernina International AG, a leading manufacturer of sewing and embroidery machines, reported that it fell victim to a cyberattack after being added to the victim list of the ALPHV ransomware group.
The group claim to have gained access to vast data, including customer, client, and employee data, NDA contracts, and drawings.
The attack’s impact has been felt in the company’s offices in Switzerland and Thailand, with tapes and NAS wiped clean. Additionally, the attackers successfully encrypted seven Hyper-V.
June 12, 2023
Swiss federal government websites and the online portal of the Swiss Federal Railways have been victims of malicious online attacks. Several websites of the federal administration are currently unavailable, Swiss public radio, SRF, reported on Monday.
According to the finance ministry, the sites were hit by a so-called DDoS attack, which aims to overload websites and applications with targeted requests so that they are no longer accessible. No data is lost in a DDoS attack.
The pro-Russian hacker group “NoName” has claimed responsibility for the attack on the federal government on its own Telegram channel, Tages-Anzeiger newspaper said. This group was also behind the attack on the Swiss parliament website (www.parlament.chExternal link) last week.
March 24, 2023
The “Neue Zürcher Zeitung” continues to struggle with problems two weeks after a cyberattack on its computers. The publisher shut down central systems for newspaper production and had to pre-produce the Saturday edition on Thursday of last week. The company announced on Saturday that this “exceptional situation” was also associated with a reduction in scope.
Due to the cyberattack, some systems and services are still not available. NZZ’s IT team is working with external specialists on corrective measures, it said. Newspapers from CH-Media-Verlag, which obtains IT services from NZZ, also appeared on a reduced basis over the weekend.
A ransomware attack on the infrastructure of NZZ’s parent, NZZ Mediengruppe in Zürich, became known two weeks ago. 500GB data stolen from this was later published on the dark web.
Additional impact at three media companies:
On May 3, CH Media confirmed that data had been published, saying, “initial analyses show that the data is from our delivery organisations”.
The Blick Group is affected as a company that belongs to CH Media is responsible for the postal delivery of the Blick newspapers, and is directly affected by the cyber attack.
Customer data from Tamedia newspapers is also said to be affected