(06.05.2026) Cyber threats remain high in Switzerland. In the second half of 2025, 29,006 incidents were reported voluntarily, in addition to 145 mandatory reports. This is shown by the semi-annual report of the Swiss Federal Office for Cybersecurity (OFCS).
Ransomware attacks represent the most frequent threat to businesses. Nearly 80 incidents (79) of this kind were recorded in the second half of 2025, compared with 47 during the same period in 2024 (+59%). Until now, however, the report has only recorded attacks reported voluntarily. The criminal group Akira, which specializes in encrypting corporate data followed by ransom demands, carried out the highest number of incidents in 2025: 26 known attacks against Swiss companies in the second half of the year and seven in the first half.
Business Email Compromise (BEC) is also increasing significantly. In the second half of 2025, 73 cases were recorded, compared with 49 during the same period in 2024. In this type of attack, criminals infiltrate a company’s email system, analyze ongoing exchanges, then alter the bank details shown on invoices in order to divert payments. One case reported to the OFCS resulted in losses of CHF 1.5 million.
Phishing attempts also remain at a high level, with 6,299 reports in the second half of 2025 (+17% compared with the same period in 2024). The OFCS is also warning against the SMS Blaster. This technique, observed in Switzerland for the first time in summer 2025, involves disguising portable devices as mobile antennas in order to broadcast fraudulent SMS messages within a radius of one kilometer and bypass operators’ filters.
In response to these risks, the OFCS recommends enabling multi-factor authentication, keeping systems up to date, and consulting its website ncsc.admin.ch regularly.
Last modification 06.05.2026
