Data breach: Online shop, Switzerland 2017
The federal government received around 70'000 stolen combinations of username and password; MELANI attributed them to the online shop dvd-shop.ch. The operator reset all passwords, took the shop offline temporarily and informed customers by email.
- Incident · 12.2017 · Switzerland
- Evidence: confirmed by an authority
- Data breach
As of
What happened
According to the shop, the data was 8 to 10 years old, but many customers are likely to still be using the passwords.
- Affected
- dvd-shop.ch
- Industry
- Online shop
- Loss
- no reliable figure
- Business interruption
- unknown
- Ransom demanded / paid
- unknown / unknown
- Data affected
- around 70'000 sets of login data (username and password)
- Bankruptcy
- no
- Entry point
- not stated in the sources
What would cyber insurance have paid?
That depends on the terms. Whether those affected were insured: unknown.
-
Letters, call centre, credit monitoring
Mostly covered 6 of 9 business products cover it fully, as an add-on or with limits.
-
Third-party claims after a data breach
Liability for data protection and network security breaches
Mostly covered 7 of 9 business products cover it fully, as an add-on or with limits.
-
Loss of income because customers stay away after the incident
Mostly no information 1 of 9 business products cover it fully, as an add-on or with limits.
-
Immediate help in an emergency
Hotline, IT forensics, crisis PR and legal advice
Mostly covered 7 of 9 business products cover it fully, as an add-on or with limits.
Overview based on public policy terms, as of 06.11.2026. Only your policy and its general terms and conditions (GTC) are binding. No confirmation of cover.
What we can learn
Old customer data remains a risk: whatever is no longer needed should be deleted.
Sources
- 70'000 Passwörter gestohlen – jetzt ist klar, wo das Leck war (opens in a new window) Netzwoche · 08.12.2017
«Die Daten sind 8-10 Jahre alt, also nicht mehr aktuell.»