Key Takeaways
- • Swiss federal pension fund Publica said on October 8, 2026 that it was exposed to a data leak after an external software provider suffered a cyber attack at the end of September, according to Reuters.
- • Publica did not identify the provider in its statement, though other reports name software supplier PK Softech as the company hit by the attack.
- • The Swiss Attorney General's office has opened an investigation, and Publica said no other federal entities had a business relationship with the provider.
- • Publica and authorities are still determining the scope of affected data; secondary reports say names, AHV numbers, salaries and pension savings may have been exposed.
Summary
Publica, which manages pensions for Swiss federal employees and affiliated organisations, said on Thursday, October 8, 2026 that it was exposed to a data leak after an external software provider suffered a cyber attack at the end of September, according to Reuters. The fund said it and the relevant authorities are working to determine the scope of the data affected. The provider was not named in the company's statement.
The Swiss Attorney General's office has opened an investigation into the incident. Publica said that no other federal entities had a business relationship with the provider, which suggests the exposure is limited to the fund's own contractual relationship with the vendor.
Other coverage of the incident identifies the supplier as PK Softech and reports that the attack may have exposed names, AHV numbers, salaries, pension savings and members' contact details. These details come from secondary reporting and were not confirmed in the primary statement, so the full extent of the breach remains unverified as of publication.
The Swiss Attorney General's office has opened an investigation into the incident. Publica said that no other federal entities had a business relationship with the provider, which suggests the exposure is limited to the fund's own contractual relationship with the vendor.
Other coverage of the incident identifies the supplier as PK Softech and reports that the attack may have exposed names, AHV numbers, salaries, pension savings and members' contact details. These details come from secondary reporting and were not confirmed in the primary statement, so the full extent of the breach remains unverified as of publication.
Go deeper than the headline
Research every firm in this story, track the ones that matter and get the daily briefing — free for 7 days.