Cyberattack on Publica’s software supplier leads to data exfiltration
Summary
Publica says data leaked after a cyberattack on supplier PK Softech in late September. The data involved and any exposure of sensitive personal information remain under investigation; federal prosecutors have opened an inquiry.
Key points
- PK Softech said attackers used malware to access part of its IT infrastructure in late September.
- The company isolated the affected environment, brought in external specialists, notified authorities and filed a criminal complaint.
- PK Softech and Publica say data was exfiltrated, but its type and exact scope are still being investigated.
- Publica warned that potentially exposed information could include salaries, pension balances, pension amounts and contact details; this has not been confirmed.
- Publica says it informed insured people. PK Softech said it had notified customers and was fully available again from October 2.
- The Swiss Office of the Attorney General has opened an investigation.
Article Details
- Victim Organization
- PK Softech (attacked software supplier); Publica was affected through its supplier relationship
- Incident Type
- Cyberattack involving malware, unauthorized access to part of PK Softech's IT infrastructure, and data exfiltration
- Data Types Exposed
- The potentially affected data may include personal information, salary details, pension assets, pension amounts, and contact details; the data type and scope are still under investigation.
- Operational Impact
- PK Softech disconnected the affected environment from the network. It reported being fully available to customers again from October 2; the year is not stated in the article.
- Ransom Or Extortion
- None reported
- Claim Status
- confirmed