Search I’ve been hacked Advice Menu
I’ve been hacked
For me Overview: For me
For businesses Overview: For businesses
Costs and comparison Overview: Costs and comparison
Swiss threat landscape Overview: Swiss threat landscape

Ransomware (extortion): IT service provider and software company, Switzerland 2026

At the end of September 2026, a cyber attack hit the software supplier PK Softech, whose software is used by the federal pension fund Publica; name, AHV number, address, salary and pension assets may be affected.

  • Incident · 09.2026 · Switzerland
  • Evidence: confirmed by an authority
  • Ransomware (extortion)
  • Data breach
  • Attack via a supplier

As of

On this page
  1. What happened
  2. Who would have paid?
  3. Lessons
  4. Sources
  5. Similar cases

What happened

According to the «Tages-Anzeiger», the group Akira is behind it and is demanding a ransom, and more than 100'000 current and former federal employees are affected; according to Publica, the pension money is safe. Data of the Pension Fund of the City of Zurich, which had been passed to PK Softech for a system change, was also exfiltrated; the fund postponed the change.

Affected
PK Softech AG (software supplier of the federal pension fund Publica)
Loss
no reliable figure
Business interruption
unknown
Ransom demanded / paid
yes / unknown
Data affected
according to the media more than 100'000 current and former federal employees (including AHV number, salary, pension data); in addition, test data of PKZH insured persons
Bankruptcy
no
Entry point
Attack on the software supplier, where data of insured persons was stored

What would cyber insurance have paid?

That depends on the terms. Whether those affected were insured: unknown.

  • Cyber extortion

    Help and negotiation; only some insurers pay the ransom, see note

    Mostly add-on 6 of 9 business products cover it fully, as an add-on or with limits.

  • Restore data and systems

    Costs of getting data, software and systems running again

    Mostly covered 6 of 9 business products cover it fully, as an add-on or with limits.

  • Third-party claims after a data breach

    Liability for data protection and network security breaches

    Mostly covered 7 of 9 business products cover it fully, as an add-on or with limits.

  • Inform affected people

    Letters, call centre, credit monitoring

    Mostly covered 6 of 9 business products cover it fully, as an add-on or with limits.

Overview based on public policy terms, as of 06.11.2026. Only your policy and its general terms and conditions (GTC) are binding. No confirmation of cover.

What we can learn

Real personal data does not belong unprotected in a supplier’s test and migration environments.

Get free advice

Sources

Similar cases

Three ways forward