Ransomware (extortion): Fiduciary services, Switzerland 2026
On 30 June 2026, the ransomware group BravoX attacked a fiduciary company in Vaud and claimed responsibility on 7 July.
- Incident · 06.2026 · Canton of Vaud, Switzerland
- Evidence: confirmed by an authority
- Ransomware (extortion)
- Data breach
As of
What happened
It published around 222 gigabytes with more than 100'000 documents and case files on the darknet; according to «Le Temps», 15 municipalities are also affected. The company paid no ransom, isolated the systems, restored data from an external backup and filed a criminal complaint.
- Affected
- Company (anonymous)
- Industry
- Fiduciary services
- Loss
- no reliable figure
- Business interruption
- unknown
- Ransom demanded / paid
- unknown / no
- Data affected
- around 222 GB, more than 100'000 documents and case files published on the darknet; according to «Le Temps», 15 municipalities affected
- Bankruptcy
- no
- Entry point
- not stated in the sources
What would cyber insurance have paid?
That depends on the terms. Whether those affected were insured: unknown.
-
Help and negotiation; only some insurers pay the ransom, see note
Mostly add-on 6 of 9 business products cover it fully, as an add-on or with limits.
-
Costs of getting data, software and systems running again
Mostly covered 6 of 9 business products cover it fully, as an add-on or with limits.
-
Third-party claims after a data breach
Liability for data protection and network security breaches
Mostly covered 7 of 9 business products cover it fully, as an add-on or with limits.
-
Letters, call centre, credit monitoring
Mostly covered 6 of 9 business products cover it fully, as an add-on or with limits.
-
Immediate help in an emergency
Hotline, IT forensics, crisis PR and legal advice
Mostly covered 7 of 9 business products cover it fully, as an add-on or with limits.
Overview based on public policy terms, as of 06.11.2026. Only your policy and its general terms and conditions (GTC) are binding. No confirmation of cover.
What we can learn
An external backup saves operations, but not the confidentiality of customer data.
Sources
- Cyberangriff legt Westschweizer Behördendaten offen (opens in a new window) inside-it.ch · 23.07.2026
«Aufgrund der Ferienzeit können wir jedoch nicht garantieren»