Akira hacker attack: data of secret agents and elite soldiers stolen
In a cyberattack on a software supplier to the Swiss federal administration, data belonging to over 100,000 people was stolen – including undercover agents and elite soldiers.
Cyberattack on pension funds: security-critical data compromised
In late September, an external software supplier to the federal pension fund Publica fell victim to a cyberattack. According to 20 Minuten, the roughly hundred gigabytes of data stolen in the attack are "far more serious for Switzerland's security than previously communicated", according to the Tages-Anzeiger.
The attackers now possess sensitive information on more than 100,000 current and former federal employees and federally-affiliated companies. Those affected include, alongside cleaning staff and ordinary administrative employees, organised crime investigators, secret agents, elite soldiers and former federal councillors. Serving federal councillors and councillors remained unaffected.
Undercover agents in danger
Particularly striking: among the stolen data are apparently also details of federal employees working at Fedpol or the Swiss Intelligence Service (NDB) under an assumed identity. "There is danger to life and limb for them," according to an internal assessment cited by the Tages-Anzeiger. The data could fall into the hands of foreign intelligence services or criminal organisations.
As a direct consequence, the NDB is currently refraining from foreign operations. The Federal Security Service has furthermore tightened protective measures for government members. The federal government has deployed a task force.
The State Secretariat for Security Policy has already identified first authentic fraud attempts against those affected.
Hacker group Akira demands ransom
According to the Tages-Anzeiger, the group Akira is behind the attack. The Federal Public Prosecutor's Office has been conducting criminal proceedings against the group since April 2024, which has already attacked around 200 companies with ransomware – with total damages of several hundred million dollars.
In the current case too, Akira is demanding a ransom payment. Should this not be forthcoming, the group threatens to publish or sell the data. To date, the stolen information has not appeared on the dark web.
Also affected was the state-owned defence company Ruag. This had, contrary to official federal recommendations, paid ransom in order to regain access to the stolen data – which had provoked considerable criticism.
Source: 20 Minuten