Ransomware (extortion): Production and industrial SMEs, Switzerland 2026
At the beginning of February 2026, a ransomware attacker briefly penetrated tightly limited areas of TRISA’s IT.
- Incident · 02.2026 · Switzerland
- Evidence: confirmed by an authority
- Ransomware (extortion)
- Data breach
As of
What happened
Thanks to immediate countermeasures, operations and the ability to deliver were maintained at all times, according to the company. A clearly defined part of the company data was copied; TRISA fulfilled its reporting obligations and filed a criminal complaint.
- Affected
- TRISA
- Industry
- Production and industrial SMEs
- Loss
- no reliable figure
- Business interruption
- unknown
- Ransom demanded / paid
- unknown / unknown
- Data affected
- clearly defined part of the company data copied
- Bankruptcy
- no
- Entry point
- not stated in the sources
What would cyber insurance have paid?
That depends on the terms. Whether those affected were insured: unknown.
-
Immediate help in an emergency
Hotline, IT forensics, crisis PR and legal advice
Mostly covered 7 of 9 business products cover it fully, as an add-on or with limits.
-
Costs of getting data, software and systems running again
Mostly covered 6 of 9 business products cover it fully, as an add-on or with limits.
-
Help and negotiation; only some insurers pay the ransom, see note
Mostly add-on 6 of 9 business products cover it fully, as an add-on or with limits.
-
Letters, call centre, credit monitoring
Mostly covered 6 of 9 business products cover it fully, as an add-on or with limits.
Overview based on public policy terms, as of 06.11.2026. Only your policy and its general terms and conditions (GTC) are binding. No confirmation of cover.
What we can learn
A quick response and limited access areas keep production running, even if data is exfiltrated.
Sources
- TRISA: IT-Sicherheitsvorfall eingedämmt (opens in a new window) TRISA AG · 06.02.2026
«Einem Ransomware-Angreifer gelang es für kurze Zeit, in eng limitierte Bereiche des IT-Systems der TRISA einzudringen.»