Ransomware (extortion): Energy and utilities, Switzerland 2023
The NCSC names EnergiePool Schweiz as a victim of the ransomware group «Play» in February 2023.
- Incident · 02.2023 · Switzerland
- Evidence: confirmed by an authority
- Ransomware (extortion)
As of
What happened
In the same half-year, the same group also hit media companies, the municipality of Saxon and IT service providers, among others. The report gives no further details on the course of events or the loss.
- Affected
- EnergiePool Schweiz
- Industry
- Energy and utilities
- Loss
- no reliable figure
- Business interruption
- unknown
- Ransom demanded / paid
- unknown / unknown
- Data affected
- unknown
- Bankruptcy
- no
- Entry point
- not stated in the sources
What would cyber insurance have paid?
That depends on the terms. Whether those affected were insured: unknown.
-
Costs of getting data, software and systems running again
Mostly covered 6 of 9 business products cover it fully, as an add-on or with limits.
-
Help and negotiation; only some insurers pay the ransom, see note
Mostly add-on 6 of 9 business products cover it fully, as an add-on or with limits.
-
Loss of income after an attack
Business interruption, only after the waiting period
Mostly covered 7 of 9 business products cover it fully, as an add-on or with limits.
-
Immediate help in an emergency
Hotline, IT forensics, crisis PR and legal advice
Mostly covered 7 of 9 business products cover it fully, as an add-on or with limits.
Overview based on public policy terms, as of 06.11.2026. Only your policy and its general terms and conditions (GTC) are binding. No confirmation of cover.
What we can learn
Energy service providers are also on the victim lists of large ransomware groups.
Sources
- Halbjahresbericht 2023/1 (opens in a new window) Nationales Zentrum für Cybersicherheit NCSC (heute BACS) · 2023
«Zu ihren Opfern gehörten unter anderem im Februar 2023 EnergiePool Schweiz»