Malware: Municipality and public administration, Switzerland 2025
On 18 June 2025, the municipality in the canton of Fribourg detected unauthorised connections to servers of its IT department.
- Incident · 06.2025 · Villars-sur-Glâne FR, Switzerland
- Evidence: confirmed by an authority
- Malware
As of
What happened
It took the servers offline for several days, called in the police and specialists and informed the NCSC and the data protection officer. From 23 June the administration was working again; by then there were no indications of data exfiltration.
- Affected
- Municipality of Villars-sur-Glâne
- Loss
- no reliable figure
- Business interruption
- 5 days
- Ransom demanded / paid
- unknown / unknown
- Data affected
- unknown
- Bankruptcy
- no
- Entry point
- unauthorised connections to servers of the IT department
What would cyber insurance have paid?
That depends on the terms. Whether those affected were insured: unknown.
-
Loss of income after an attack
Business interruption, only after the waiting period
Mostly covered 7 of 9 business products cover it fully, as an add-on or with limits.
-
Immediate help in an emergency
Hotline, IT forensics, crisis PR and legal advice
Mostly covered 7 of 9 business products cover it fully, as an add-on or with limits.
-
Costs of getting data, software and systems running again
Mostly covered 6 of 9 business products cover it fully, as an add-on or with limits.
Overview based on public policy terms, as of 06.11.2026. Only your policy and its general terms and conditions (GTC) are binding. No confirmation of cover.
What we can learn
Switching off quickly costs a few days of operation, but can prevent data exfiltration.
Sources
- Gemeinde Villars-sur-Glâne ist Opfer eines Cyberangriffs (opens in a new window) Netzwoche · 24.06.2025
«Bislang habe man aber keine Hinweise darauf, dass es zu einem Datenabfluss gekommen sei.»
Similar cases
- Malware: Municipality and public administration, Switzerland 2021
- Account takeover: Municipality and public administration, Switzerland 2026
- Ransomware (extortion): Municipality and public administration, Switzerland 2026
- Ransomware (extortion): Municipality and public administration, Switzerland 2026