简体 繁體 日本語 한국어 Bahasa Indonesia Русский Українська English Deutsch Français Español Português Tiếng Việt Türkçe العربية עברית

Security and cyber risks

Read the PDF edition (2 pages)

The concentration of valuable companies and wealthy individuals in a small canton creates security risks. Cyber attacks against Swiss companies and authorities have increased in recent years. In 2023, an attack on an IT supplier of the federal administration exposed sensitive data of federal authorities.1 Commodity traders, crypto companies and wealth managers are attractive targets for criminals and state actors, since they hold valuable data and assets. The crypto industry has suffered several hacks in which tokens worth millions were stolen.

While the canton and the companies have invested in cyber security, the Confederation has created a Federal Office for Cyber Security.2 The protection of wealthy residents and their families is a further concern, handled by private security firms and the police. These risks are unlikely to change the location decisions of most companies, but they add to the costs of operating in the canton. A major cyber incident affecting the financial or commodity infrastructure could damage the canton's reputation for security and stability.

Notes

  1. Federal Council, press release "Hackerangriff auf Firma Xplain: Bundesrat mandatiert politisch-strategischen Krisenstab 'Datenabfluss'", 28 June 2023, admin.ch: ransomware attack on the IT service provider Xplain affected data of the federal administration; Federal Office for Cyber Security (BACS), press release "Hackerangriff auf Firma Xplain: Bericht ... zur Datenanalyse publiziert" (2024), ncsc.admin.ch: data published on the darknet by the group "Play" on 14 June 2023, about 1.3 million objects, of which about 65,000 relevant to the federal administration. ↩
  2. Federal Council, press release "Meldepflicht für Cyberangriffe auf kritische Infrastrukturen", 7 March 2025, admin.ch: operators of critical infrastructure must report cyber attacks to the Federal Office for Cyber Security (BACS) within 24 hours, from 1 April 2025. BACS operational since 1 January 2024 as successor of the NCSC (Federal Council decision of 2 December 2022; de.wikipedia.org, "Bundesamt für Cybersicherheit"). ↩

For general information only. This article does not constitute legal or tax advice, does not replace advice on an individual case and creates no lawyer-client relationship. It reflects the legal position as of September 2025.

Setting up or expanding in Switzerland?

Helvetica Register is an information portal. It explains what companies and entrepreneurs from around the world, and in particular from Greater China, Central Asia and the Caucasus, the rest of Asia, the Middle East, Africa and Latin America, need to know about doing business in Switzerland: company law, commercial contracts, licences, banking, tax and residence.

Legal advice in Switzerland is provided by Ressos Legal, a Zurich law practice advising on all areas of Swiss law under the direction of Dr Alexander Ressos. Further information is available at www.ressos.ch.

Your project in Switzerland Speak to Dr Alexander Ressos Company formation, shareholder and commercial agreements, acquisitions, licences, bank accounts, tax and residence permits: I advise on Swiss law and coordinate with your lawyers in your home country, as well as local counsel in other jurisdictions as required.