Account takeover: Municipality and public administration, Switzerland 2026
On 18 August 2026, the municipality in Valais discovered that unknown persons had had access to the business email system of the municipal secretariat.
- Incident · 08.2026 · Martigny-Combe VS, Switzerland
- Evidence: confirmed by an authority
- Account takeover
- Phishing
As of
What happened
Through it, a fraudulent message was sent to contacts of the administration, among others; personal data from this email may have reached third parties. The municipality blocked access, called in specialists, reported the incident to the NCSC and the cantonal data protection officer and is filing a criminal complaint.
- Affected
- Municipality of Martigny-Combe
- Loss
- no reliable figure
- Business interruption
- unknown
- Ransom demanded / paid
- unknown / unknown
- Data affected
- possibly personal data from the fraudulent email
- Bankruptcy
- no
- Entry point
- unauthorised access to the email system of the municipal secretariat
What would cyber insurance have paid?
That depends on the terms. Whether those affected were insured: unknown.
-
Immediate help in an emergency
Hotline, IT forensics, crisis PR and legal advice
Mostly covered 7 of 9 business products cover it fully, as an add-on or with limits.
-
Letters, call centre, credit monitoring
Mostly covered 6 of 9 business products cover it fully, as an add-on or with limits.
-
Loss of income because customers stay away after the incident
Mostly no information 1 of 9 business products cover it fully, as an add-on or with limits.
Overview based on public policy terms, as of 06.11.2026. Only your policy and its general terms and conditions (GTC) are binding. No confirmation of cover.
What we can learn
A hijacked mailbox sends out fraud in your own name; a second factor at login usually prevents this.
Sources
- Cyberangriff kompromittiert E-Mail-System der Gemeinde Martigny-Combe (opens in a new window) Swisscybersecurity.net · 24.08.2026
«Der betroffene Zugang ist sofort nach der Feststellung des Vorfalls gesperrt worden»
Similar cases
- Ransomware (extortion): Municipality and public administration, Switzerland 2026
- Ransomware (extortion): Municipality and public administration, Switzerland 2026
- Malware: Municipality and public administration, Switzerland 2025
- Deception (social engineering): Municipality and public administration, Switzerland 2025