Rolle

Profile narrative

Rolle is a municipality located in the canton of Vaud, Switzerland, functioning as the local government for the town and its surrounding area. It provides a range of public services including civil registration, resident administration, local infrastructure maintenance, and community amenities. As a public sector body, its primary mandate is to serve the interests of residents and ensure the orderly functioning of communal life. The organisation operates under the legal framework established by Swiss federal and cantonal legislation.

The municipal administration manages data pertaining to the entire resident population, encompassing personal identifiers, addresses, birth dates, social security information, residency permits, and other sensitive records. This data collection is necessary for the delivery of services such as taxation, schooling, health monitoring, and voter registration. The breadth of information held by Rolle means that any breach can affect a large proportion of the community. The municipality’s role as a custodian of such data underscores its responsibility to protect privacy and security.

In May 2021, Rolle suffered a ransomware attack that initially was downplayed but later revealed to have compromised municipal systems and exposed a wide array of personal data. The incident led to the disclosure of names, addresses, birth dates, social security numbers, residency permits, religious affiliations, school records, COVID‑19 infection data among children, employee performance evaluations, and some criminal records. Following the breach, local officials acknowledged the underestimation of the threat and filed a criminal complaint, while a taskforce was established to manage the aftermath. The event highlighted gaps in the municipality’s cyber‑defence posture and prompted a reassessment of risk management practices.

Rolle is a publicly owned municipal entity, accountable to the cantonal government of Vaud and ultimately to the residents it serves. There is no indication in the available sources of a parent company or subsidiary structure; the organisation functions as an autonomous local authority. Its governance model includes an elected municipal council and administrative departments that implement council decisions. This structure ensures that the organisation remains directly responsive to community needs while operating within the broader Swiss public administration framework.

Incidents

1 incident linked to this organisation.