Switzerland

Profile narrative

The organization is known by the alias Switzerland.
Its headquarters is located in Switzerland.
The entity has been referenced in open-source cybersecurity reporting.
These references pertain to a series of distributed denial-of-service and ransomware incidents affecting Swiss-based organizations.
The reporting spans incidents from 2023 to 2025.

On 21 January 2025, a pro-Russian hacker group identified as NoName057(16) launched distributed denial-of-service attacks.
The targets included Swiss financial institutions such as Zürcher Kantonalbank and Waadtländer Kantonalbank.
Additionally, municipal websites for the communities of Luzern and Kriens were overwhelmed by traffic.
The group claimed responsibility on the social media platform X, stating the actions were retaliation for Switzerland’s support of Ukraine.
The attacks rendered the targeted services temporarily inaccessible without involving data exfiltration.

In April 2023, a Vaud-based IT services provider experienced a cyberattack that forced it to shut down all client systems for three days.
The impact extended to municipalities, small and medium enterprises, automotive firms, and industrial service providers.
The company detected unauthorized access, isolated the affected systems, and restored operations after continuous technical work.
It asserted that no data was exfiltrated, although clients expressed concern about potential exposure on the darknet.
A separate incident in March 2023 involved another regional IT provider whose systems were encrypted, affecting a healthcare facility client, with forensic analysis indicating no data leakage despite prolonged disruption.

Incidents

3 incidents linked to this organisation.