Science & Tech · Cybersecurity · 6 hrs ago
Hackers steal user data from Swiss magazine Republik
Hackers stole user data from Swiss online magazine Republik using a flaw in an analytics tool.
The magazine is based in Zurich, Switzerland, and says the attackers’ access began in August.
The flaw had been known since August 6, but Republik says it failed to take timely action to fix it.
The stolen records included names and email addresses, and some also contained phone numbers, birth years and gender.
Credit card information was not taken, but people who only signed up for a newsletter were among those affected.
Attackers also had access to samples of other database records, though Republik says there is no sign they used that access.
Republik closed the flaw and reported the incident to Switzerland’s data protection authority; it does not know who was behind the attack.
The Swiss online magazine Republik said hackers stole data from all its users, including current and former subscribers and newsletter subscribers.
The stolen records included email addresses and names, and could include phone numbers, birth years and gender.
The magazine said no credit card information was taken.
Republik said the security flaw had been known since August 6 but it failed to take timely countermeasures.
The attackers’ identities are unknown, and the magazine said the evidence pointed to a broad, automated attack rather than a targeted one.
- Who
- Unknown hackers accessed the data. Republik, a Swiss online magazine, was affected.
- What
- User data was stolen through a security flaw. The magazine said credit card information was not affected.
- When
- The flaw had been known since August 6, 2026. Republik reported the breach on October 15, 2026.
- Where
- Republik’s database was accessed through a flaw in an analysis tool.
- Why
- Not stated
This story does not have two clearly opposing sides.
Republik said the security flaw had been known since this date.
Republik shut down Metabase, ending the attackers’ access, according to the magazine.
Republik reported the breach and notified Switzerland’s Federal Data Protection and Information Commissioner after an initial damage assessment.
- Affected service
- Republik, a Swiss online magazine
- Affected users
- All users, including current and former subscribers and newsletter subscribers
- Data taken
- Email addresses and names; some records also included phone numbers, birth years and gender
- Credit card information
- Not affected, according to Republik
- Security flaw known
- August 6, 2026
- Attacker identity
- Unknown
2 sources
What people are saying
Die Sicherheitslücke war seit dem 6. August bekannt, aber wir haben es versäumt, rechtzeitig die nötigen Gegenmassnahmen zu treffen. Das ist unser Fehler. Es tut uns leid.
Die Sicherheitslücke war seit dem 6. August bekannt, aber wir haben es versäumt, rechtzeitig die nötigen Gegenmassnahmen zu treffen