Switzerland — Cyber Threat Profile
Switzerland's National Cyber Security Centre (NCSC), under the Defence Ministry, coordinates national cyber strategy execution. In 2025 it mandated reporting of cyberattacks on critical infrastructure, generating tens of thousands of incident notifications. The NCSC strengthens cybersecurity across infrastructure, economy, and public services while facilitating threat intelligence exchange. Switzerland periodically updates its National Cyber Strategy and invests heavily in public-private cooperation. As a neutral, non-NATO/EU state, it relies on bilateral partnerships and European collaboration frameworks to sustain high cyber resilience and situational awareness.- National CERT/CSIRT: NCSC.ch
- Data protection authority: Préposé fédéral à la protection des données et à la transparence (source: CNIL)
- World Cybercrime Index 2024 (origin significance): 0.55 / 100, #41 worldwide
- Secure Internet servers per 1M people (2024): 167,357.6 (source: World Bank)
- Internet users (2025): 97.3% of population (source: World Bank)
Threat actors targeting Switzerland
- APT28 APT
- NoName057(16) Hacktivist
- Turla APT
- Akira Ransomware · 26 incident(s)
- Qilin Ransomware · 17 incident(s)
- SafePay Ransomware · 10 incident(s)
- LockBit Ransomware · 7 incident(s)
- 8Base Ransomware · 6 incident(s)
- Black Basta Ransomware · 6 incident(s)
- DragonForce Ransomware · 6 incident(s)
- The Gentlemen Ransomware · 6 incident(s)
- Payload Ransomware · 5 incident(s)
- Play Ransomware Ransomware · 5 incident(s)
- RansomHub Ransomware · 5 incident(s)
- Rhysida Ransomware · 5 incident(s)
- INC Ransom Ransomware · 4 incident(s)
- Fog Ransomware Ransomware · 3 incident(s)
- KillSec Ransomware · 3 incident(s)
- Sarcoma Ransomware · 3 incident(s)
- ShinyHunters Ransomware · 3 incident(s)
- BlackSuit Ransomware · 2 incident(s)
- BravoX Ransomware · 2 incident(s)
- Cl0p Ransomware · 2 incident(s)
- Deadlock Ransomware · 2 incident(s)
- Krybit Ransomware · 2 incident(s)
- Lynx Ransomware Ransomware · 2 incident(s)
- Majinahanashi Ransomware · 2 incident(s)
- MedusaLocker Ransomware · 2 incident(s)
- N0n Ransomware · 2 incident(s)
- NightSpire Ransomware · 2 incident(s)
- RansomHouse Ransomware · 2 incident(s)
- Space Bears Ransomware · 2 incident(s)
- AiLock Ransomware · 1 incident(s)
- Anubis Ransomware · 1 incident(s)
- APT73 Ransomware · 1 incident(s)
- Aurora Ransomware · 1 incident(s)
- BianLian Ransomware · 1 incident(s)
- Booba Project Ransomware · 1 incident(s)
- Coinbase Cartel Ransomware · 1 incident(s)
- Everest Ransomware · 1 incident(s)
Most targeted sectors
- Manufacturing 30 incident(s)
- Business & Professional Services 27 incident(s)
- Technology 20 incident(s)
- Healthcare 15 incident(s)
- Construction 13 incident(s)
- Financial Services 9 incident(s)
- Agriculture & Food 7 incident(s)
- Transportation & Logistics 7 incident(s)
- Retail & Consumer 6 incident(s)
- Energy & Utilities 5 incident(s)
- Education & Research 4 incident(s)
- Hospitality & Tourism 2 incident(s)
Recent claimed incidents
- SunTechnics Fabrisolar AG 2026-10-23 · Energy & Utilities
- ARX Group SA 2026-10-23 · Other
- Company #95 2026-10-20
- MAP SA 2026-10-16
- Camandona SA 2026-10-10
- hoteldelfinolugano.ch 2026-10-09 · Hospitality
- Rueegseggerag 2026-10-05
- stuecheli.ch 2026-10-05 · Retail & E-Commerce
- manno.ch 2026-09-28 · Other
- bio-strath.com 2026-09-28 · Healthcare
- lfgholding.com 2026-09-28 · Other
- Netech (Neeser Technik AG) 2026-09-28 · Manufacturing
- Touring Club Suisse 2026-09-20 · Transportation
- stoecklin-kuechen.ch 2026-09-15 · Retail & E-Commerce
- ara-lyss.ch 2026-09-15 · Professional Services