Swiss officials confirm massive data breach of federal employees by Akira ransomware group

A ransomware operation identified as Akira infiltrated the network of PK Softech AG, an IT provider for numerous Swiss pension schemes, during the night of 28 to 29 September. The attackers downloaded roughly a hundred gigabytes of compressed pension-fund data, which includes personal identifiers, employment details, bank information and family data for a large number of current and former federal employees. The breach affects a wide spectrum of staff, from cleaning crews to magistrates, and notably includes intelligence officers and elite soldiers.

Akira is now demanding ransom and has warned that non-payment could lead to the release or sale of the data. The Swiss Federal Police (Fedpol), the National Intelligence Service (NDB) and the State Secretariat for Security Policy (Sepos) have formed a task force to investigate, analyse the leaked material and watch for any dark-web postings. Publica, the federal pension fund, has informed its members that a data leak cannot be ruled out and that further information will be provided when available.