Ransomware (extortion): Company, Switzerland 2026
At the end of August 2026, the ransomware group The Gentlemen claimed a data theft at a company in Vaud that installs cameras, panic buttons and motion detectors; on 25 September, the perpetrators offered documents on the darknet.
- Incident · 08.2026 · Canton of Vaud, Switzerland
- Evidence: one media report
- Ransomware (extortion)
- Data breach
As of
What happened
According to «Le Temps», these include building plans, camera locations and panic button layouts of prisons in the Orbe plain, police sites and several banks, in some cases with user names and passwords. According to its own statements, the company paid no ransom and notified its customers.
- Affected
- Company (anonymous)
- Industry
- other industry
- Loss
- no reliable figure
- Business interruption
- unknown
- Ransom demanded / paid
- unknown / no
- Data affected
- Building plans, camera locations and panic button layouts of customers (including prisons, police, banks), in some cases user names and passwords
- Bankruptcy
- no
- Entry point
- not stated in the sources
What would cyber insurance have paid?
That depends on the terms. Whether those affected were insured: unknown.
-
Help and negotiation; only some insurers pay the ransom, see note
Mostly add-on 6 of 9 business products cover it fully, as an add-on or with limits.
-
Costs of getting data, software and systems running again
Mostly covered 6 of 9 business products cover it fully, as an add-on or with limits.
-
Third-party claims after a data breach
Liability for data protection and network security breaches
Mostly covered 7 of 9 business products cover it fully, as an add-on or with limits.
-
Loss of income because customers stay away after the incident
Mostly no information 1 of 9 business products cover it fully, as an add-on or with limits.
-
Letters, call centre, credit monitoring
Mostly covered 6 of 9 business products cover it fully, as an add-on or with limits.
Overview based on public policy terms, as of 06.11.2026. Only your policy and its general terms and conditions (GTC) are binding. No confirmation of cover.
What we can learn
Anyone who keeps customers’ plans and login data is a worthwhile target themselves; such documents belong in encrypted, separate storage.
Sources
- Cyberangriff auf Waadtländer Firma legt sensible Sicherheitsdaten offen (opens in a new window) Netzwoche (gestützt auf Le Temps) · 08.10.2026
«Die Kenntnis der Kameramodelle reicht nicht aus, um eine Sicherheitslücke auszunutzen»