Science & Tech · Cybersecurity · 3 hrs ago
Cyberattack on Swiss software firm may expose pension and security data
A cyberattack on Swiss software company PK Softech in late September may have stolen customer data.
The company provides software to Publica, the pension fund for Swiss federal employees, and other pension funds.
The data potentially exposed include addresses, account and social insurance numbers, salaries and details about spouses.
A confidential government note warns that federal security agencies could be particularly affected, including intelligence, defence and police services.
If personal details identify Swiss employees working abroad, other countries could question or detain them, the government warns.
The full scale of the leak is still unknown, and Publica is investigating with federal specialists; the inquiry could take months.
The case has also raised concern about the risks of pension funds relying on outside software providers to handle sensitive information.
A cyberattack on Swiss software provider PK Softech may have exposed personal data held by pension funds, including the federal pension fund Publica.
The attack took place at the end of September, and the full scope of the data theft remains unknown.
Reports say federal security agencies could be affected, with some employees working abroad potentially at risk of identification, questioning or detention.
More than 100,000 insured people and pensioners could have had data exposed, according to NZZ, though this figure is not confirmed.
Publica and federal specialists are investigating the incident.
- Who
- PK Softech, a software provider, was attacked. Publica and other pension funds may be affected.
- What
- A cyberattack may have stolen pension-fund customer data and could expose information about federal security employees.
- When
- The attack happened at the end of September 2026. PK Softech reportedly notified clients of risks on 14 October.
- Where
- PK Softech is based in Reinach, near Basel, Switzerland.
- Why
- The sources do not state the attackers’ motive.
This story does not have two clearly opposing sides.
PK Softech was hit by a cyberattack involving malicious software.
PK Softech reportedly informed clients about risks from the attack.
Finance Minister Karin Keller-Sutter reportedly presented a confidential information note to the Federal Council.
News reports said investigations into the potential data exposure were continuing.
- PK Softech location
- Reinach, near Basel
- Attack timing
- End of September 2026
- Publica active insured people
- 70,000
- Publica pension recipients
- 41,500
- Potentially affected people
- More than 100,000 insured people and pensioners, according to NZZ; the figure is unconfirmed
- Client notification
- 14 October 2026
4 sources
Les organes de sécurité de la Confédération potentiellement touchés par un nouveau vol de données
Sécurité suisse en péril : cyberattaque sur Publica dévoile des données sensibles
Datenklau beim Bund könnte Mitarbeitende im Ausland gefährden
Immer mehr betroffene Pensionskassen: Die Daten von über 100 000 Versicherten könnten nun bei Cyberkriminellen sein
What people are saying
Pension funds can outsource software development to external companies, but that does not absolve them of responsibility for data and software.
A concrete impact on the pension funds managed by Libera or on individual insured people can therefore neither be confirmed nor ruled out.