Data breach: Online shop, Switzerland 2017
The group «Armada Collective» claimed to have the entire customer database of a Swiss online shop and enclosed a data record as proof.
- Incident · 02.2017 · Switzerland
- Evidence: one media report
- Data breach
- Fraud
As of
What happened
It demanded 2.85 Bitcoin (around 3000 francs) within three days for deleting it. The operator did not pay and filed a criminal complaint; the origin of the data remained unclear.
- Affected
- Company (anonymous)
- Industry
- Online shop
- Loss
- no reliable figure
- Business interruption
- unknown
- Ransom demanded / paid
- yes / no
- Data affected
- Customer data (extent and origin unclear)
- Bankruptcy
- no
- Entry point
- not stated in the sources
What would cyber insurance have paid?
That depends on the terms. Whether those affected were insured: unknown.
-
Help and negotiation; only some insurers pay the ransom, see note
Mostly add-on 6 of 9 business products cover it fully, as an add-on or with limits.
-
Immediate help in an emergency
Hotline, IT forensics, crisis PR and legal advice
Mostly covered 7 of 9 business products cover it fully, as an add-on or with limits.
-
Letters, call centre, credit monitoring
Mostly covered 6 of 9 business products cover it fully, as an add-on or with limits.
-
Third-party claims after a data breach
Liability for data protection and network security breaches
Mostly covered 7 of 9 business products cover it fully, as an add-on or with limits.
Overview based on public policy terms, as of 06.11.2026. Only your policy and its general terms and conditions (GTC) are binding. No confirmation of cover.
What we can learn
Even a mere threat involving customer data requires quick clarification of whether data has really been exfiltrated.
Sources
- Hackergruppe Armada Collective erpresst Schweizer Onlineshop (opens in a new window) IT Reseller · 16.02.2017