Phishing: Company, Switzerland 2023
A supposed bridal couple from abroad contacted a wedding planner about a wedding at the end of 2024, praised the offer and suggested a Zoom call.
- Incident · 09.2023 · Switzerland
- Evidence: confirmed by an authority
- Phishing
- Deception (social engineering)
As of
What happened
For the budget and plans, they referred to a document on «One Drive», whose link led to a phishing page for the email login data. According to the NCSC, attentive employees were able to prevent worse.
- Affected
- Company (anonymous)
- Industry
- other industry
- Loss
- no reliable figure
- Business interruption
- unknown
- Ransom demanded / paid
- unknown / unknown
- Data affected
- unknown
- Bankruptcy
- no
- Entry point
- fake customer enquiry with a OneDrive link
What would cyber insurance have paid?
That depends on the terms. Whether those affected were insured: unknown.
-
CEO fraud, diverted payment, fake invoice
Mostly add-on 5 of 9 business products cover it fully, as an add-on or with limits.
-
Immediate help in an emergency
Hotline, IT forensics, crisis PR and legal advice
Mostly covered 7 of 9 business products cover it fully, as an add-on or with limits.
Overview based on public policy terms, as of 06.11.2026. Only your policy and its general terms and conditions (GTC) are binding. No confirmation of cover.
What we can learn
Even a tempting customer enquiry is no reason to enter login data on a linked page.
Sources
- Wochenrückblick Woche 38: Wenn der Kunde kein König, sondern ein Hacker ist (opens in a new window) Bundesamt für Cybersicherheit BACS (bis 2023: NCSC) · 26.09.2023
«In beiden Fällen konnten die aufmerksamen Mitarbeitenden Schlimmeres verhindern.»