Swiss General trade school (Allgemeine Gewerbeschule)

The Swiss General Trade School, also known as Allgemeine Gewerbeschule, operates as a vocational education institution based in Switzerland. Its core function involves providing vocational training programs, preparing students for careers in various trades and technical fields. The school delivers educational services focused on practical skills development relevant to specific industries and professions within the Swiss economy. This aligns with the typical mission of vocational schools to bridge the gap between academic learning and workforce requirements.

In April 2021, the school suffered a significant cybersecurity incident identified as a Ryuk ransomware attack. Malicious actors compromised the institution's operational infrastructure, rendering all operational servers inaccessible and disrupting critical data availability. The attack vector was traced back to a malicious email attachment, a common infiltration method. This breach severely impacted the school's ability to function normally, necessitating immediate emergency measures to facilitate reopening. These measures included activating a temporary wireless network, isolating the compromised data center, and shutting down affected host systems to contain the malware spread.

The incident prompted the school to file a criminal complaint with authorities and notify relevant national cybersecurity agencies. Due to the compromise of internal email systems, communication with students and staff regarding the disruption and recovery efforts was conducted via postal mail. Plans were initiated to establish an external website dedicated to handling inquiries related to the incident. While administrative servers remained unaffected, the primary focus of recovery efforts centered on restoring data and mitigating the widespread operational impacts caused by the ransomware. This attack exemplifies the Ryuk malware's known pattern of targeting sectors like education and healthcare, highlighting the vulnerability of such institutions to disruptive cyber threats.