Data breach: School, Switzerland 2026
At the end of August 2026, the HWZ announced that hackers had stolen data of students and alumni from an external IT service provider.
- Incident · 08.2026 · Zurich, Switzerland
- Evidence: confirmed by an authority
- Data breach
- Attack via a supplier
As of
What happened
The data affected includes bank details, information from sick notes, names, addresses, telephone numbers and data from the student administration. According to the HWZ, its own IT was not affected and operations continued normally; the university informed those affected and called in the police.
- Affected
- Hochschule für Wirtschaft Zürich (HWZ)
- Industry
- School
- Loss
- no reliable figure
- Business interruption
- unknown
- Ransom demanded / paid
- unknown / unknown
- Data affected
- Students and alumni (bank details, sick notes, contact details, student administration); number not stated
- Bankruptcy
- no
- Entry point
- Attack on the infrastructure of an external IT service provider
What would cyber insurance have paid?
That depends on the terms. Whether those affected were insured: unknown.
-
Letters, call centre, credit monitoring
Mostly covered 6 of 9 business products cover it fully, as an add-on or with limits.
-
Third-party claims after a data breach
Liability for data protection and network security breaches
Mostly covered 7 of 9 business products cover it fully, as an add-on or with limits.
-
Loss of income because customers stay away after the incident
Mostly no information 1 of 9 business products cover it fully, as an add-on or with limits.
Overview based on public policy terms, as of 06.11.2026. Only your policy and its general terms and conditions (GTC) are binding. No confirmation of cover.
What we can learn
Anyone who passes data to a service provider remains responsible towards those affected; protection and reporting obligations belong in the contract.
Sources
- Hacker greifen HWZ-Daten über externen Dienstleister ab (opens in a new window) Netzwoche · 26.08.2026
«keine Hinweise darauf, dass auch die lokale IT-Infrastruktur der HWZ betroffen sei»