Incident Chronicle · 33 Documented Swiss Attacks

Cyberattacks in Switzerland: Timeline and Technical Assessment

Documented cyber incidents affecting Swiss organizations since 2016. Every case is grounded in public sources and evaluated technically: would an external threat analysis have detected and neutralized the attack vector?

Evaluation Criteria

Yes

The attack vector is publicly documented and falls directly within our 12 audit domains: exposed services, unpatched flaws, MFA-less portals, or leaked credentials.

Yes, by attack pattern

The exact exploit was not disclosed, but the threat group operates via well-documented entry patterns covered by our external scope.

Partially

The initial breach occurred outside the external audit scope (e.g. targeted email attachment). The audit would have curtailed lateral expansion without stopping the email opening.

Municipalities & Government

Municipality of Martigny-Combe VS: Email System Compromised

Adversaries gained unauthorized access to the municipal email system, distributing fraudulent communications to citizen contacts and creating risk of personal data exposure.

Would the Threat Analysis have audited this entry point? Yes

Compromised mail accounts occur via stolen credentials lacking MFA. Darknet credential screening and Microsoft 365 MFA posture auditing are standard components of our external assessment.