Data breach: Company, Switzerland 2026
On 14 October 2026, «Republik» noticed that criminals had exploited a vulnerability in the analytics tool Metabase that the manufacturer had already made public at the beginning of August.
- Incident · 10.2026 · Switzerland
- Evidence: confirmed by an authority
- Data breach
As of
What happened
They harvested the names, email addresses and subscription details of all registered users, and on a sample basis also postal addresses, comments and votes; in the worst case, the authorship of anonymous comments can be attributed for around 2'300 people. Republik switched off Metabase, informed the FDPIC and admitted that it had not subscribed to the manufacturer’s security alerts.
- Affected
- Republik (online magazine)
- Industry
- other industry
- Loss
- no reliable figure
- Business interruption
- unknown
- Ransom demanded / paid
- unknown / unknown
- Data affected
- All registered users (name, email, subscription details); postal addresses and comments on a sample basis; up to around 2'300 anonymous comments attributable
- Bankruptcy
- no
- Entry point
- known, unpatched vulnerability in the analytics tool Metabase
What would cyber insurance have paid?
That depends on the terms. Whether those affected were insured: unknown.
-
Letters, call centre, credit monitoring
Mostly covered 6 of 9 business products cover it fully, as an add-on or with limits.
-
Third-party claims after a data breach
Liability for data protection and network security breaches
Mostly covered 7 of 9 business products cover it fully, as an add-on or with limits.
-
Loss of income because customers stay away after the incident
Mostly no information 1 of 9 business products cover it fully, as an add-on or with limits.
-
Immediate help in an emergency
Hotline, IT forensics, crisis PR and legal advice
Mostly covered 7 of 9 business products cover it fully, as an add-on or with limits.
Overview based on public policy terms, as of 06.11.2026. Only your policy and its general terms and conditions (GTC) are binding. No confirmation of cover.
What we can learn
If you do not subscribe to your software’s security alerts, you only learn of the vulnerability from the attacker.
Sources
- Onlinemagazin «Republik» meldet Datenabfluss (opens in a new window) Netzwoche · 19.10.2026
«Wir hatten die Sicherheitswarnungen des Herstellers nicht abonniert.»