Switzerland — Cyber Threat Profile
Switzerland's National Cyber Security Centre (NCSC), under the Defence Ministry, coordinates national cyber strategy execution. In 2025 it mandated reporting of cyberattacks on critical infrastructure, generating tens of thousands of incident notifications. The NCSC strengthens cybersecurity across infrastructure, economy, and public services while facilitating threat intelligence exchange. Switzerland periodically updates its National Cyber Strategy and invests heavily in public-private cooperation. As a neutral, non-NATO/EU state, it relies on bilateral partnerships and European collaboration frameworks to sustain high cyber resilience and situational awareness.- National CERT/CSIRT: NCSC.ch
- Data protection authority: Préposé fédéral à la protection des données et à la transparence (source: CNIL)
- World Cybercrime Index 2024 (origin significance): 0.55 / 100, #41 worldwide
- Secure Internet servers per 1M people (2024): 167,357.6 (source: World Bank)
- Internet users (2025): 97.3% of population (source: World Bank)
Threat actors targeting Switzerland
- APT28 APT
- NoName057(16) Hacktivist
- Turla APT
- Akira Ransomware · 26 incident(s)
- Qilin Ransomware · 16 incident(s)
- LockBit Ransomware · 7 incident(s)
- 8Base Ransomware · 6 incident(s)
- Black Basta Ransomware · 6 incident(s)
- DragonForce Ransomware · 6 incident(s)
- Play Ransomware Ransomware · 5 incident(s)
- RansomHub Ransomware · 5 incident(s)
- Rhysida Ransomware · 5 incident(s)
- INC Ransom Ransomware · 4 incident(s)
- Payload Ransomware · 4 incident(s)
- The Gentlemen Ransomware · 4 incident(s)
- Fog Ransomware Ransomware · 3 incident(s)
- KillSec Ransomware · 3 incident(s)
- SafePay Ransomware · 3 incident(s)
- Sarcoma Ransomware · 3 incident(s)
- ShinyHunters Ransomware · 3 incident(s)
- BlackSuit Ransomware · 2 incident(s)
- BravoX Ransomware · 2 incident(s)
- Cl0p Ransomware · 2 incident(s)
- Deadlock Ransomware · 2 incident(s)
- Krybit Ransomware · 2 incident(s)
- Lynx Ransomware Ransomware · 2 incident(s)
- NightSpire Ransomware · 2 incident(s)
- RansomHouse Ransomware · 2 incident(s)
- Space Bears Ransomware · 2 incident(s)
- AiLock Ransomware · 1 incident(s)
- Anubis Ransomware · 1 incident(s)
- APT73 Ransomware · 1 incident(s)
- BianLian Ransomware · 1 incident(s)
- Booba Project Ransomware · 1 incident(s)
- Coinbase Cartel Ransomware · 1 incident(s)
- Everest Ransomware · 1 incident(s)
- FunkSec Ransomware · 1 incident(s)
- Handala Hacktivist · 1 incident(s)
- Hunters International Ransomware · 1 incident(s)
- M3rx Ransomware · 1 incident(s)
Most targeted sectors
- Manufacturing 28 incident(s)
- Business & Professional Services 26 incident(s)
- Technology 20 incident(s)
- Healthcare 14 incident(s)
- Construction 13 incident(s)
- Financial Services 9 incident(s)
- Agriculture & Food 7 incident(s)
- Transportation & Logistics 6 incident(s)
- Education & Research 4 incident(s)
- Energy & Utilities 4 incident(s)
- Retail & Consumer 4 incident(s)
- Government & Public Sector 1 incident(s)
Recent claimed incidents
- Medela.com 2026-09-07 · Healthcare
- Union for International Cancer Control (UICC) 2026-09-01 · Professional Services
- Ixa Systems 2026-08-30 · Technology
- el-group 2026-08-22 · Other
- Qualiflex Datacenter | HWZ-Studiengnge (fh-hwz.ch), myenb.ch, etc 2026-08-20 · Technology
- Logitech/ Streamlabs 2026-08-18 · Technology
- Gfeller Treuhand und Verwaltungs 2026-08-14 · Professional Services
- MAMMUT.COM 2026-08-12 · Retail & E-Commerce
- Camandona SA 2026-08-12
- Stücheli Architekten 2026-08-11 · Professional Services
- Elixi International SA 2026-08-10 · Healthcare
- MITC AG 2026-08-06 · Other
- Pharma Test Apparatebau AG 2026-08-06 · Manufacturing
- Stadler Rail 2026-08-05 · Transportation
- Festina Group 2026-08-05 · Retail & E-Commerce