Data breach: Company, Switzerland 2026
On 28 September 2026, SRG reported that unauthorised persons had accessed data of around 340 current and former SRF employees, most of them from the «Information» unit.
- Incident · 09.2026 · Switzerland
- Evidence: confirmed by an authority
- Data breach
As of
What happened
The data dates from 2020: names, positions as well as business and in some cases private contact details; according to SRG, passwords, bank details and journalistic sources were not affected. SRG deactivated the logins, informed those affected and filed a criminal complaint.
- Affected
- SRG SSR (data of SRF employees)
- Industry
- other industry
- Loss
- no reliable figure
- Business interruption
- unknown
- Ransom demanded / paid
- unknown / unknown
- Data affected
- around 340 employees (names, positions, contact details from 2020)
- Bankruptcy
- no
- Entry point
- not stated in the sources
What would cyber insurance have paid?
That depends on the terms. Whether those affected were insured: unknown.
-
Letters, call centre, credit monitoring
Mostly covered 6 of 9 business products cover it fully, as an add-on or with limits.
-
Immediate help in an emergency
Hotline, IT forensics, crisis PR and legal advice
Mostly covered 7 of 9 business products cover it fully, as an add-on or with limits.
-
Loss of income because customers stay away after the incident
Mostly no information 1 of 9 business products cover it fully, as an add-on or with limits.
Overview based on public policy terms, as of 06.11.2026. Only your policy and its general terms and conditions (GTC) are binding. No confirmation of cover.
What we can learn
Old data records that nobody needs any more are still loot in a break-in; whatever is no longer needed should be deleted.
Sources
- Cyberkriminelle stehlen Daten von SRF-Mitarbeitenden (opens in a new window) Netzwoche · 28.09.2026
«Die betroffenen Zugänge wurden bereits deaktiviert und zusätzliche Sicherheitsmassnahmen umgesetzt.»