Data breach: Production and industrial SMEs, Switzerland 2026
In August 2026, the Confederation’s space industry supplier detected first signs of malicious activity in its IT; it made the targeted attack public at the beginning of October.
- Incident · 08.2026 · Switzerland
- Evidence: confirmed by an authority
- Data breach
As of
What happened
Beyond Gravity is investigating the case with the NCSC and Mandiant; data has apparently been exfiltrated. According to SRF, the company and the Confederation assume that China is behind it; the origin has not been officially confirmed.
- Affected
- Beyond Gravity
- Industry
- Production and industrial SMEs
- Loss
- no reliable figure
- Business interruption
- unknown
- Ransom demanded / paid
- unknown / unknown
- Data affected
- Data exfiltrated, which data is unclear
- Bankruptcy
- no
- Entry point
- not stated in the sources
What would cyber insurance have paid?
That depends on the terms. Whether those affected were insured: unknown.
-
Immediate help in an emergency
Hotline, IT forensics, crisis PR and legal advice
Mostly covered 7 of 9 business products cover it fully, as an add-on or with limits.
-
Costs of getting data, software and systems running again
Mostly covered 6 of 9 business products cover it fully, as an add-on or with limits.
-
Loss of income because customers stay away after the incident
Mostly no information 1 of 9 business products cover it fully, as an add-on or with limits.
Overview based on public policy terms, as of 06.11.2026. Only your policy and its general terms and conditions (GTC) are binding. No confirmation of cover.
What we can learn
In targeted espionage, thorough forensics counts for more than a quick announcement.
Sources
- Update: China könnte hinter dem Cyberangriff auf Beyond Gravity stehen (opens in a new window) Netzwoche (gestützt auf Swissinfo und SRF) · 06.10.2026, Update 15.10.2026
«Die Herkunft des Angreifers ist nach wie vor nicht bestätigt»