Federal data compromised again: Swiss company hacked

Basel-based software company Concevis fell victim to a ransomware attack. All of the company’s servers were encrypted. The stolen data likely includes federal government data, according to the National Center for Cybersecurity (NCSC). The NCSC speaks of “older, operational data”. The in-depth analyzes were still ongoing.

In the ransomware attack, the attackers stole the data and then encrypted all of the company’s servers. After the company failed to meet the ransom demand, the attackers threatened to publish the data on the dark web.

Concevis is a Swiss provider of software solutions for governments (federal government, cantons, cities), the financial sector and companies in industry and logistics. The company informed its customers about the cyber incident and filed a criminal complaint with the public prosecutor’s office in Basel-Stadt.

Concevis’s client base also includes various administrative units of the federal government. According to current knowledge, the Federal Office for Civil Protection, the Federal Office for Spatial Development, the Federal Office for Statistics, the Federal Office for Civil Aviation, the Federal Tax Administration and the Training Command are on Concevis’s customer list.

As the NCSC further writes, it is currently being examined which positions and data are specifically involved. A compromise between federal systems is currently unlikely.

The NCSC coordinates further clarifications and measures within the federal government. (red)