Ransomware (extortion): Architectural and engineering office, Switzerland 2024
The NCSC counts an interior design company from French-speaking Switzerland among the at least three Swiss victims of the «RansomHub» ransomware that emerged in 2024.
- Incident · 2024 · French-speaking Switzerland, Switzerland
- Evidence: confirmed by an authority
- Ransomware (extortion)
As of
What happened
According to the NCSC, this group targets poorly configured cloud storage and backups. The report gives no further details on the loss.
- Affected
- Company (anonymous)
- Loss
- no reliable figure
- Business interruption
- unknown
- Ransom demanded / paid
- unknown / unknown
- Data affected
- unknown
- Bankruptcy
- no
- Entry point
- not stated in the sources
What would cyber insurance have paid?
That depends on the terms. Whether those affected were insured: unknown.
-
Costs of getting data, software and systems running again
Mostly covered 6 of 9 business products cover it fully, as an add-on or with limits.
-
Help and negotiation; only some insurers pay the ransom, see note
Mostly add-on 6 of 9 business products cover it fully, as an add-on or with limits.
-
Loss of income after an attack
Business interruption, only after the waiting period
Mostly covered 7 of 9 business products cover it fully, as an add-on or with limits.
-
Immediate help in an emergency
Hotline, IT forensics, crisis PR and legal advice
Mostly covered 7 of 9 business products cover it fully, as an add-on or with limits.
Overview based on public policy terms, as of 06.11.2026. Only your policy and its general terms and conditions (GTC) are binding. No confirmation of cover.
What we can learn
Planning offices are also on the victim lists; cloud storage and backups must be properly configured.
Sources
- Halbjahresbericht 2024/2 (opens in a new window) Bundesamt für Cybersicherheit BACS · 2025
«ein Innenarchitekturunternehmen aus der Romandie, ein Industrieunternehmen aus dem Kanton Zürich und ein Software-Unternehmen aus dem Kanton Bern»