Search I’ve been hacked Advice Menu
I’ve been hacked
For me Overview: For me
For businesses Overview: For businesses
Costs and comparison Overview: Costs and comparison
Swiss threat landscape Overview: Swiss threat landscape

Ransomware (extortion): Municipality and public administration, Switzerland 2021

At the end of May 2021, the administration of the municipality in the canton of Vaud with around 5400 residents fell victim to a ransomware attack.

  • Incident · 05.2021 · Rolle VD, Switzerland
  • Evidence: several media
  • Ransomware (extortion)
  • Data breach

As of

On this page
  1. What happened
  2. Who would have paid?
  3. Lessons
  4. Sources
  5. Similar cases

What happened

The municipality at first spoke of a weak attack on email servers; in August, «Le Temps» showed that data of all residents was on the darknet, including AHV numbers, residence permits and in some cases criminal record extracts. The municipality admitted that it had underestimated the attack, filed a criminal complaint and set up a task force.

Affected
Municipality of Rolle
Loss
no reliable figure
Business interruption
unknown
Ransom demanded / paid
unknown / unknown
Data affected
Personal data of the residents (names, addresses, dates of birth, AHV numbers, etc.)
Bankruptcy
no
Entry point
not stated in the sources

What would cyber insurance have paid?

That depends on the terms. Whether those affected were insured: unknown.

  • Restore data and systems

    Costs of getting data, software and systems running again

    Mostly covered 6 of 9 business products cover it fully, as an add-on or with limits.

  • Inform affected people

    Letters, call centre, credit monitoring

    Mostly covered 6 of 9 business products cover it fully, as an add-on or with limits.

  • Third-party claims after a data breach

    Liability for data protection and network security breaches

    Mostly covered 7 of 9 business products cover it fully, as an add-on or with limits.

  • Proceedings before authorities

    Costs of FDPIC or GDPR proceedings, usually not fines

    Mostly limited 6 of 9 business products cover it fully, as an add-on or with limits.

  • Reputational damage

    Loss of income because customers stay away after the incident

    Mostly no information 1 of 9 business products cover it fully, as an add-on or with limits.

  • Immediate help in an emergency

    Hotline, IT forensics, crisis PR and legal advice

    Mostly covered 7 of 9 business products cover it fully, as an add-on or with limits.

Overview based on public policy terms, as of 06.11.2026. Only your policy and its general terms and conditions (GTC) are binding. No confirmation of cover.

What we can learn

After an attack, it must be clarified early on whether data has been exfiltrated; playing it down damages trust.

Get free advice

Sources

Similar cases

Three ways forward