Regionale Verkehrsbetriebe Baden-Wettingen

Regionale Verkehrsbetriebe Baden-Wettingen (RVBW) is a regional public transport operator headquartered in Switzerland. The organisation provides bus transportation services within the Baden-Wettingen area and surrounding communities. Its operations include managing bus fleets, maintaining routes, and operating passenger information systems such as digital stop displays. RVBW also supports related office functions that enable scheduling, ticketing, and customer service for its transit network. The organisation’s services are intended to facilitate local mobility and connect residents to key destinations within the region.

In March 2025, RVBW experienced a Play ransomware attack that encrypted some internal data while leaving customer and subscription information unaffected. The incident did not disrupt bus service, although temporary glitches were observed in digital stop displays and office systems. Following detection, RVBW isolated its IT network, cut external connections, and conducted a comprehensive scan of all computers to contain the threat. The organisation refused to pay the ransom, complied with Switzerland’s critical‑infrastructure reporting requirements, and began cooperating with police investigators. RVBW’s response included restoring affected systems within a day and using the event to strengthen its cybersecurity defenses.