n'guard Cyber Security TLP:CLEAR
Weekly Cyber Report · Calendar Week 41/2026

Cyber threat landscape
Switzerland.

The week's reporting figures from public Swiss statistics, aggregated, put into context and prepared for decision-makers.

Published: 18.10.2026 Source: BACS · ransomware.live Free to use with attribution
View all editions
1’271
Reports to the BACS in calendar week 41
−10%
Phishing, change on previous week
105
Swiss ransomware victims, last twelve months
n'guard assessment of this week

This week's threat landscape presents a mixed picture. Classic attack methods such as phishing (501 reports) and fraud attempts (348 reports) are declining, but hacking activity has risen by a worrying 92 per cent to 48 cases, pointing to a shift towards more direct forms of attack. The latest ransomware incidents in Hospitality and Retail suggest that criminals are deliberately targeting sectors with high business volumes, so companies should review their access controls and backup strategies.

The key points in brief

Summary of the week.

Summary

The Swiss cyber threat landscape in calendar week 41/2026: the Swiss Federal Office for Cybersecurity (BACS) received 1’271 reports of cyber incidents. The most frequent category was phishing with 503 reports (-10% compared with the previous week). Over the past twelve months, 105 Swiss ransomware victims have been made public.

Categories

Reported incidents by category.

All reports received by the BACS in calendar week 41/2026, with change compared with the previous week.

Phishing
503
−10%
Fraud attempts
350
−16%
Spam
228
−48%
Hacking
47
+88%
Cybersquatting
13
−24%
Malware
11
+38%

Bar length is relative to the most frequently reported category of the week. These are reports received by the BACS, not necessarily successful attacks.

Ransomware

Most recently disclosed cases with a Swiss connection.

Victims that have become publicly visible on leak sites, not the total number of incidents in Switzerland.
DisclosedSectorGroup
16.10.2026 Not Found THEGENTLEMEN
10.10.2026 Not Found MAJINAHANASHI
09.10.2026 Hospitality SAFEPAY
08.10.2026 Retail & E-Commerce PAYLOAD
05.10.2026 Retail & E-Commerce SAFEPAY
05.10.2026 Not Found MEDUSALOCKER

Methodology and sources

The data is based exclusively on publicly available sources: the reporting statistics published weekly by the Swiss Federal Office for Cybersecurity (BACS) and publicly disclosed ransomware cases via ransomware.live. n'guard does not collect its own reporting figures. Instead, it aggregates this data, puts it into context and translates it into actionable recommendations.

The figures reflect the number of cyber incidents reported, not the actual total in Switzerland. The number of unreported cases is likely to be higher for technically more sophisticated attacks than for widely recognised fraud schemes. This report contains no confidential or access-restricted information (TLP:CLEAR) and may be freely reused with attribution.

Suggested citation: n'guard Cyber Security: Weekly Cyber Report, calendar week 41/2026. Available at https://nguard.swiss/cyber-weekly-report/kw-41-2026/

How vulnerable is your company really?

In four minutes, the n'guard Security Quick Check gives you a well-founded, anonymous assessment of your attack surface, with concrete recommendations and no registration.

Start the Security Quick Check