Cyber Incident Victim: Cremo S.A.
Date:
Jul 2022
Location:
Switzerland
Summary
Cremo S.A., a major Swiss dairy producer and the country's second-largest milk processor, experienced a cybersecurity breach. The company, headquartered in Fribourg with over 800 employees across five cantons, is currently assessing the extent of the incident's impact.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 3 motives | 2 techniques |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On or around July 10, 2022, Swiss dairy producer Cremo S.A. experienced a cybersecurity breach described as a computer hacking incident. The company, headquartered in Fribourg and ranking as Switzerland's second-largest milk processor, detected unauthorized access to its systems. Cremo immediately initiated an assessment process to determine the scope and severity of the intrusion. With operations spanning five Swiss cantons and a workforce exceeding 800 employees, the breach potentially affected multiple operational sites. No specific details were released regarding the intrusion methods, compromised data categories, or affected IT infrastructure at the time of initial reporting. The company's response focused on containing the incident and evaluating operational impacts across its production and distribution networks.

Cremo's status as a major player in Switzerland's dairy industry heightened concerns about potential supply chain disruptions following the security incident. The organization maintained public communications confirming the breach while emphasizing that damage analysis remained ongoing. No ransomware claims, financial demands, or threat actor attributions were disclosed in initial reports. The company's incident response protocol appeared to prioritize forensic investigation and system integrity assessments before releasing detailed impact statements. Business continuity measures were implied through the absence of reported production halts, though the full operational consequences required further investigation at the time of disclosure.
