What has already happened to others?
We have collected 197 real cyber attacks, 113 of them in Switzerland. The most common are Deception (social engineering), Ransomware (extortion), Fraud.
As of
All cases
Switzerland (113)
- Ransomware (extortion): Medical practice, Switzerland 2026
- Devices and control systems: Butcher’s shop, Switzerland 2026
- Deception (social engineering): Private individual, Switzerland 2026
- Data breach: School, Switzerland 2026
- Phishing: Private individual, Switzerland 2026
- Ransomware (extortion): Production and industrial SMEs, Switzerland 2026
- Data breach: Company, Switzerland 2026
- Account takeover: Association and foundation, Switzerland 2026
- Deception (social engineering): Private individual, Switzerland 2026
- Ransomware (extortion): Production and industrial SMEs, Switzerland 2026
- Data breach: Hotel and accommodation, Switzerland 2026
- Deception (social engineering): Private individual, Switzerland 2026
- Deception (social engineering): Hospital and care home, Switzerland 2026
- Data breach: Company, Switzerland 2026
- Ransomware (extortion): IT service provider and software company, Switzerland 2026
- Deception (social engineering): Private individual, Switzerland 2026
- Malware: Restaurant and catering, Switzerland 2026
- Data breach: Public administration, Switzerland 2026
- Account takeover: Municipality and public administration, Switzerland 2026
- Data breach: School, Switzerland 2026
- Ransomware (extortion): Company, Switzerland 2026
- Data breach: Production and industrial SMEs, Switzerland 2026
- Data breach: Production and industrial SMEs, Switzerland 2026
- Account takeover: Public administration, Switzerland 2026
- Deception (social engineering): Private individual, Switzerland 2026
- Deception (social engineering): Private individual, Switzerland 2026
- Ransomware (extortion): Fiduciary services, Switzerland 2026
- Overload attack (DDoS): Telecommunications, Switzerland 2026
- Ransomware (extortion): Municipality and public administration, Switzerland 2026
- Fraud: Private individual, Switzerland 2026
- Deception (social engineering): Private individual, Switzerland 2026
- Ransomware (extortion): Hospital and care home, Switzerland 2026
- Ransomware (extortion): Municipality and public administration, Switzerland 2026
- Ransomware (extortion): Production and industrial SMEs, Switzerland 2026
- Deception (social engineering): Private individual, Switzerland 2026
- Deepfake: Company, Switzerland 2026
- Deception (social engineering): Private individual, Switzerland 2026
- Deepfake: Private individual, Switzerland 2026
- Deepfake: Private individual, Switzerland 2026
- Phishing: Private individual, Switzerland 2025
- Fraud: Private individual, Switzerland 2025
- Ransomware (extortion): Company, Switzerland 2025
- Phishing: Private individual, Switzerland 2025
- Ransomware (extortion): Association and foundation, Switzerland 2025
- Malware: Municipality and public administration, Switzerland 2025
- Fraud: Private individual, Switzerland 2025
- Phishing: Private individual, Switzerland 2025
- Deception (social engineering): Municipality and public administration, Switzerland 2025
- Malware: Hotel and accommodation, Switzerland 2025
- Fraud: Private individual, Switzerland 2025
- Deception (social engineering): Private individual, Switzerland 2025
- Malware: School, Switzerland 2025
- Overload attack (DDoS): Energy and utilities, Switzerland 2025
- Ransomware (extortion): IT service provider and software company, Switzerland 2025
- Phishing: Private individual, Switzerland 2025
- Deception (social engineering): Association and foundation, Switzerland 2024
- Fake payment instruction: Company, Switzerland 2024
- Malware: Medical practice, Switzerland 2024
- Overload attack (DDoS): Municipality and public administration, Switzerland 2024
- Ransomware (extortion): Company, Switzerland 2024
- Phishing: Private individual, Switzerland 2024
- Overload attack (DDoS): Telecommunications, Switzerland 2024
- Fraud: Company, Switzerland 2024
- Account takeover: Private individual, Switzerland 2024
- Fraud: Company, Switzerland 2024
- Attack via a supplier: Hotel and accommodation, Switzerland 2024
- Ransomware (extortion): Production and industrial SMEs, Switzerland 2024
- Account takeover: Private individual, Switzerland 2024
- Fraud: Private individual, Switzerland 2024
- Phishing: Private individual, Switzerland 2024
- Deepfake: Company, Switzerland 2024
- Phishing: Hotel and accommodation, Switzerland 2024
- Ransomware (extortion): Private individual, Switzerland 2024
- Deception (social engineering): Company, Switzerland 2024
- Ransomware (extortion): Architectural and engineering office, Switzerland 2024
- Ransomware (extortion): Agriculture, Switzerland 2023
- Phishing: Company, Switzerland 2023
- Deception (social engineering): Private individual, Switzerland 2023
- Fraud: Private individual, Switzerland 2023
- Ransomware (extortion): IT service provider and software company, Switzerland 2023
- Malware: Company, Switzerland 2023
- Ransomware (extortion): IT service provider and software company, Switzerland 2023
- Phishing: Private individual, Switzerland 2023
- Ransomware (extortion): Production and industrial SMEs, Switzerland 2023
- Ransomware (extortion): Municipality and public administration, Switzerland 2023
- Deception (social engineering): Private individual, Switzerland 2023
- Fraud: Private individual, Switzerland 2023
- Ransomware (extortion): Energy and utilities, Switzerland 2023
- Fake payment instruction: Company, Switzerland 2023
- Phishing: Private individual, Switzerland 2023
- Fraud: IT service provider and software company, Switzerland 2022
- Fraud: Private individual, Switzerland 2022
- Account takeover: Private individual, Switzerland 2022
- Malware: Company, Switzerland 2022
- Fake payment instruction: Garage and car dealership, Switzerland 2022
- Data breach: Medical practice, Switzerland 2022
- Phishing: Association and foundation, Switzerland 2022
- Malware: Production and industrial SMEs, Switzerland 2022
- Ransomware (extortion): Transport and logistics, Switzerland 2022
- Phishing: Private individual, Switzerland 2022
- Ransomware (extortion): Garage and car dealership, Switzerland 2022
- Deception (social engineering): Association and foundation, Switzerland 2022
- Malware: Municipality and public administration, Switzerland 2021
- Ransomware (extortion): Fiduciary services, Switzerland 2021
- Ransomware (extortion): Hospital and care home, Switzerland 2021
- Ransomware (extortion): Municipality and public administration, Switzerland 2021
- Malware: Hospital and care home, Switzerland 2019
- Ransomware (extortion): Production and industrial SMEs, Switzerland 2019
- Malware: Hotel and accommodation, Switzerland 2018
- Ransomware (extortion): Butcher’s shop, Switzerland 2018
- Data breach: Online shop, Switzerland 2017
- Data breach: Online shop, Switzerland 2017
- Ransomware (extortion): Construction company, Switzerland 2016
Abroad (84)
- Devices and control systems: Retail (shop), Germany 2026
- Devices and control systems: Hospital and care home, France 2026
- Devices and control systems: Retail (shop), Belgium 2026
- Devices and control systems: Butcher’s shop, Belgium 2026
- Devices and control systems: Retail (shop), France 2026
- Devices and control systems: Retail (shop), Sweden 2026
- Cyber incident: Energy and utilities, Germany 2026
- Fraud: Online shop, Germany 2026
- Deception (social engineering): Private individual, Austria 2026
- Deepfake: Private individual, Germany 2026
- Devices and control systems: Butcher’s shop, Germany 2026
- Phishing: Private individual, Italy 2026
- Devices and control systems: Energy and utilities, Mexico 2026
- Devices and control systems: Energy and utilities, Poland 2025
- Phishing: Private individual, Austria 2025
- Malware: Public administration, Ukraine 2025
- Devices and control systems: Agriculture, Canada 2025
- Deepfake: Private individual, Germany 2025
- Deception (social engineering): Private individual, Germany 2025
- Malware: Company, international 2025
- Data breach: Company, international 2025
- Devices and control systems: Bakery and confectionery, Germany 2025
- Deepfake: Private individual, USA 2025
- Malware: Food, Germany 2025
- Ransomware (extortion): Production and industrial SMEs, Germany 2025
- Ransomware (extortion): Production and industrial SMEs, Germany 2025
- Deepfake: IT service provider and software company, Poland 2025
- Fraud: Private individual, Germany 2024
- Malware: Online shop, international 2024
- Deception (social engineering): Private individual, Germany 2024
- Deepfake: Production and industrial SMEs, Italy 2024
- Deception (social engineering): IT service provider and software company, USA 2024
- Ransomware (extortion): Garage and car dealership, USA 2024
- Deepfake: IT service provider and software company, USA 2024
- Fraud: Private individual, Austria 2024
- Deepfake: Architectural and engineering office, Hong Kong 2024
- Devices and control systems: Energy and utilities, Ukraine 2024
- Ransomware (extortion): IT service provider and software company, Germany 2023
- Ransomware (extortion): Transport and logistics, United Kingdom 2023
- Malware: Transport and logistics, USA 2023
- Ransomware (extortion): Restaurant and catering, USA 2023
- Ransomware (extortion): Company, Germany 2023
- Deepfake: Private individual, Canada 2023
- Deception (social engineering): Private individual, Germany 2023
- Deepfake: Private individual, USA 2023
- Fake payment instruction: Trades (electrical, plumbing, joinery, painting), Germany 2022
- Deception (social engineering): Private individual, Austria 2022
- Deception (social engineering): Private individual, USA 2022
- Deception (social engineering): Private individual, Austria 2022
- Deception (social engineering): Private individual, Austria 2022
- Ransomware (extortion): School, USA 2021
- Ransomware (extortion): Agriculture, USA 2021
- Ransomware (extortion): Municipality and public administration, Germany 2021
- Ransomware (extortion): Retail (shop), Sweden 2021
- Ransomware (extortion): Food, USA 2021
- Ransomware (extortion): Transport and logistics, Netherlands 2021
- Deception (social engineering): Private individual, Austria 2021
- Deception (social engineering): Private individual, Germany 2021
- Ransomware (extortion): Hospital and care home, USA 2021
- Data breach: Medical practice, Finland 2020
- Ransomware (extortion): Hospital and care home, Germany 2020
- Ransomware (extortion): Law firm and notary’s office, USA 2020
- Ransomware (extortion): Architectural and engineering office, United Kingdom 2020
- Ransomware (extortion): Medical practice, USA 2019
- Deepfake: Energy and utilities, United Kingdom 2019
- Ransomware (extortion): Medical practice, USA 2019
- Ransomware (extortion): Hotel and accommodation, Austria 2017
- Ransomware (extortion): Dental practice, Germany 2016
- Ransomware (extortion): Pharmacy and drugstore, Germany 2016
- Fake payment instruction: Production and industrial SMEs, Austria 2016
- Attack via a supplier: Retail (shop), USA 2013
- Phishing: Hotel and accommodation, Austria
- Ransomware (extortion): Agriculture, Canada
- Fake payment instruction: Association and foundation, Germany
- Fake payment instruction: Association and foundation, Germany
- Deception (social engineering): Association and foundation, Germany
- Fake payment instruction: Trades (electrical, plumbing, joinery, painting), Germany
- Malware: Company, Germany
- Ransomware (extortion): Dental practice, Germany
- Phishing: Private individual, Germany
- Phishing: Retail (shop), Germany
- Ransomware (extortion): Hairdresser, beauty salon, nail studio, Germany
- Ransomware (extortion): Retail (shop), Germany
- Fake payment instruction: Private individual, Germany
How to read the cases
For each case you can see what happened, what it cost and what cyber insurance would have paid. We only give names if those affected went public themselves; private individuals always remain anonymous. 20 cases have a documented link to artificial intelligence.
What the evidence labels mean
- confirmed by an authority: an authority, a court or the police published the case.
- several media: several independent media report the same facts.
- one media report: one source; details may be inaccurate.
All values as a table
| Type of attack | Switzerland | Abroad | Total |
|---|---|---|---|
| Deception (social engineering) | 34 | 25 | 59 |
| Ransomware (extortion) | 31 | 26 | 57 |
| Fraud | 33 | 19 | 52 |
| Data breach | 34 | 10 | 44 |
| Phishing | 21 | 6 | 27 |
| Account takeover | 19 | 8 | 27 |
| Malware | 12 | 10 | 22 |
| Attack via a supplier | 12 | 6 | 18 |
| Devices and control systems | 2 | 14 | 16 |
| Deepfake | 5 | 11 | 16 |
| Fake payment instruction | 3 | 8 | 11 |
| Overload attack (DDoS) | 4 | 0 | 4 |
We describe some Swiss incidents in detail in the Swiss cyber case studies.