Ransomware (extortion): Private individual, Switzerland 2024
A private individual had a network storage device (NAS) that could be reached from the internet via port forwarding.
- Incident · 02.2024 · Switzerland
- Evidence: confirmed by an authority
- Ransomware (extortion)
As of
What happened
Through a vulnerability, perpetrators took over the device, spread through the home network and encrypted the family photos, among other things; in the ransom note they demanded a considerable sum. The victim did not pay and filed a criminal complaint; the photos remained encrypted.
- Affected
- Private individual (anonymous)
- Industry
- Private individual
- Loss
- no reliable figure
- Business interruption
- unknown
- Ransom demanded / paid
- yes / no
- Data affected
- Family photos and other private data encrypted
- Bankruptcy
- no
- Entry point
- vulnerable NAS with port forwarding
What would cyber insurance have paid?
That depends on the terms. Whether those affected were insured: unknown.
-
Remove malware, restore data and devices
Mostly no information 15 of 29 private products cover it fully, as an add-on or with limits.
-
Sextortion, ransomware on your own device
Mostly no information 13 of 29 private products cover it fully, as an add-on or with limits.
-
Attack on camera, router or door lock
Mostly no information 1 of 29 private products cover it fully, as an add-on or with limits.
Overview based on public policy terms, as of 06.11.2026. Only your policy and its general terms and conditions (GTC) are binding. No confirmation of cover.
What we can learn
Do not make devices in the home network accessible from the internet unless necessary, and also back up photos offline.
Sources
- Wochenrückblick Woche 5: Schützen Sie Ihr privates Netzwerk vor fremden Zugriffen (opens in a new window) Bundesamt für Cybersicherheit BACS (bis 2023: NCSC) · 06.02.2024
«Gemäss den Empfehlungen des BACS hat das Opfer kein Lösegeld bezahlt und Anzeige bei der Kantonspolizei erstattet.»