CSIDB logo
Incident

Cremo S.A.

Incident posture

Attack window
Jul 2022
Location
Switzerland
Status
Historical
CIA posture
Available to members
Updated
2025-10-18 00:00

Linked entities

Victim
Cremo S.A.
Threat actors
0 actors
Sources
1 source

Timeline

Occurred
Jul 2022
Discovered
Pending
Disclosed
Pending
Resolved
Pending

Summary

Cremo S.A., a major Swiss dairy producer and the country's second-largest milk processor, experienced a cybersecurity breach. The company, headquartered in Fribourg with over 800 employees across five cantons, is currently assessing the extent of the incident's impact.

Motives

Detailed motive labels are available to members.

3 motives

TTPs

Detailed technique labels are available to members.

2 techniques

Description

On or around July 10, 2022, Swiss dairy producer Cremo S.A. experienced a cybersecurity breach described as a computer hacking incident. The company, headquartered in Fribourg and ranking as Switzerland's second-largest milk processor, detected unauthorized access to its systems. Cremo immediately initiated an assessment process to determine the scope and severity of the intrusion. With operations spanning five Swiss cantons and a workforce exceeding 800 employees, the breach potentially affected multiple operational sites. No specific details were released regarding the intrusion methods, compromised data categories, or affected IT infrastructure at the time of initial reporting. The company's response focused on containing the incident and evaluating operational impacts across its production and distribution networks.

Cremo's status as a major player in Switzerland's dairy industry heightened concerns about potential supply chain disruptions following the security incident. The organization maintained public communications confirming the breach while emphasizing that damage analysis remained ongoing. No ransomware claims, financial demands, or threat actor attributions were disclosed in initial reports. The company's incident response protocol appeared to prioritize forensic investigation and system integrity assessments before releasing detailed impact statements. Business continuity measures were implied through the absence of reported production halts, though the full operational consequences required further investigation at the time of disclosure.

Sources

Sources available to members: 1 source.

CSIDB