Data breach: School, Switzerland 2026
At the end of October 2026, the canton of Vaud noticed unauthorised access to the IT support platform of the upper secondary schools and vocational schools.
- Incident · 10.2026 · Canton of Vaud, Switzerland
- Evidence: confirmed by an authority
- Data breach
As of
What happened
Names, school email addresses and the content of support requests of around 3500 teachers and 38'000 pupils were affected; grades, pupil records and passwords were not affected. The canton took the platform offline, reported the incident to the NCSC and the data protection authority and warned of phishing.
- Affected
- IT support platform of the post-compulsory schools of the canton of Vaud
- Industry
- School
- Loss
- no reliable figure
- Business interruption
- unknown
- Ransom demanded / paid
- unknown / unknown
- Data affected
- around 3500 teachers and 38'000 pupils (names, school email, support requests)
- Bankruptcy
- no
- Entry point
- unauthorised access to the IT support platform
What would cyber insurance have paid?
That depends on the terms. Whether those affected were insured: unknown.
-
Letters, call centre, credit monitoring
Mostly covered 6 of 9 business products cover it fully, as an add-on or with limits.
-
Proceedings before authorities
Costs of FDPIC or GDPR proceedings, usually not fines
Mostly limited 6 of 9 business products cover it fully, as an add-on or with limits.
-
Immediate help in an emergency
Hotline, IT forensics, crisis PR and legal advice
Mostly covered 7 of 9 business products cover it fully, as an add-on or with limits.
Overview based on public policy terms, as of 06.11.2026. Only your policy and its general terms and conditions (GTC) are binding. No confirmation of cover.
What we can learn
Even apparently harmless support data with names and email addresses is raw material for targeted phishing.
Sources
- Data of 40,000 Swiss students and teachers stolen (opens in a new window) swissinfo.ch (SDA) · 31.10.2026