Cyberattack Compromises Around 200 Accounts on Swiss Federal SharePoint Servers

Summary
A cyberattack compromised around 200 accounts on Swiss federal SharePoint servers. Internet access for people outside the administration was blocked; the agency reported no signs of data exfiltration so far.
Key points
- The Swiss Federal Office of Information Technology and Telecommunications said around 200 accounts were compromised in an attack on its SharePoint servers.
- Access to the affected servers from outside the federal administration via the internet was blocked.
- The agency said it had found no signs of data exfiltration; its analysis was ongoing.
- The affected SharePoint servers were being rebuilt as a precaution.
- The agency said it shared relevant technical indicators with Swiss critical-infrastructure operators through the national cyber-security platform.
Article Details
- Victim Organization
- Federal Office of Information Technology and Telecommunications (BIT)
- Incident Type
- Cyberattack on SharePoint servers; approximately 200 accounts were compromised.
- Disclosure Date
- 2026-08-04
- Affected Records
- Approximately 200 compromised accounts; no data exposure was reported.
- Operational Impact
- External access to the affected SharePoint servers via the internet was blocked. BIT was rebuilding the affected servers as a precaution, and analysis was ongoing.
- Claim Status
- confirmed
