Switzerland — Cyber Threat Profile
Switzerland's National Cyber Security Centre (NCSC), under the Defence Ministry, coordinates national cyber strategy execution. In 2025 it mandated reporting of cyberattacks on critical infrastructure, generating tens of thousands of incident notifications. The NCSC strengthens cybersecurity across infrastructure, economy, and public services while facilitating threat intelligence exchange. Switzerland periodically updates its National Cyber Strategy and invests heavily in public-private cooperation. As a neutral, non-NATO/EU state, it relies on bilateral partnerships and European collaboration frameworks to sustain high cyber resilience and situational awareness.- National CERT/CSIRT: NCSC.ch
- Data protection authority: Préposé fédéral à la protection des données et à la transparence (source: CNIL)
- World Cybercrime Index 2024 (origin significance): 0.55 / 100, #41 worldwide
- Secure Internet servers per 1M people (2024): 167,357.6 (source: World Bank)
- Internet users (2025): 97.3% of population (source: World Bank)
Threat actors targeting Switzerland
- APT28 APT
- NoName057(16) Hacktivist
- Turla APT
- Akira Ransomware · 26 incident(s)
- Qilin Ransomware · 18 incident(s)
- 8Base Ransomware · 6 incident(s)
- Black Basta Ransomware · 6 incident(s)
- DragonForce Ransomware · 6 incident(s)
- LockBit Ransomware · 6 incident(s)
- RansomHub Ransomware · 6 incident(s)
- Play Ransomware Ransomware · 5 incident(s)
- Rhysida Ransomware · 5 incident(s)
- BlackSuit Ransomware · 3 incident(s)
- Fog Ransomware Ransomware · 3 incident(s)
- INC Ransom Ransomware · 3 incident(s)
- KillSec Ransomware · 3 incident(s)
- SafePay Ransomware · 3 incident(s)
- Sarcoma Ransomware · 3 incident(s)
- The Gentlemen Ransomware · 3 incident(s)
- BravoX Ransomware · 2 incident(s)
- Cl0p Ransomware · 2 incident(s)
- Deadlock Ransomware · 2 incident(s)
- Lynx Ransomware Ransomware · 2 incident(s)
- NightSpire Ransomware · 2 incident(s)
- Payload Ransomware · 2 incident(s)
- RansomHouse Ransomware · 2 incident(s)
- Space Bears Ransomware · 2 incident(s)
- AiLock Ransomware · 1 incident(s)
- ALP-001 Ransomware · 1 incident(s)
- Anubis Ransomware · 1 incident(s)
- APT73 Ransomware · 1 incident(s)
- Aurora Ransomware · 1 incident(s)
- BianLian Ransomware · 1 incident(s)
- Booba Project Ransomware · 1 incident(s)
- Coinbase Cartel Ransomware · 1 incident(s)
- Everest Ransomware · 1 incident(s)
- FunkSec Ransomware · 1 incident(s)
- Handala Hacktivist · 1 incident(s)
- Hunters International Ransomware · 1 incident(s)
- Krybit Ransomware · 1 incident(s)
Most targeted sectors
- Business & Professional Services 22 incident(s)
- Manufacturing 19 incident(s)
- Technology 17 incident(s)
- Healthcare 11 incident(s)
- Financial Services 9 incident(s)
- Transportation & Logistics 6 incident(s)
- Agriculture & Food 5 incident(s)
- Construction 4 incident(s)
- Education & Research 3 incident(s)
- Energy & Utilities 3 incident(s)
- Retail & Consumer 2 incident(s)
- Government & Public Sector 1 incident(s)
Recent claimed incidents
- Planungsgruppe M+M AG 2026-08-17 · Professional Services
- Gfeller Treuhand und Verwaltungs 2026-08-14 · Professional Services
- Camandona SA 2026-08-12
- MAMMUT.COM 2026-08-12 · Retail & E-Commerce
- Stücheli Architekten 2026-08-11 · Professional Services
- Elixi International SA 2026-08-10 · Healthcare
- Pharma Test Apparatebau AG 2026-08-06 · Manufacturing
- MITC AG 2026-08-06 · Other
- Festina Group 2026-08-05 · Retail & E-Commerce
- Stadler Rail 2026-08-05 · Transportation
- Alcon Inc. 2026-08-02 · Healthcare
- Della Casa Group AG 2026-07-28 · Other
- OPTIDEA GmbH 2026-07-27 · Technology
- Guntert & Zimmerman 2026-07-25 · Manufacturing
- Schaad, Balass, Menzl and Partner AG 2026-07-25 · Professional Services