n'guard Cyber Security TLP:CLEAR
Weekly Cyber Report · Calendar Week 42/2026

Cyber threat landscape
Switzerland.

The week's reporting figures from public Swiss statistics, aggregated, put into context and prepared for decision-makers.

Published: 25.10.2026 Source: BACS · ransomware.live Free to use with attribution
View all editions
1’157
Reports to the BACS in calendar week 42
−17%
Phishing, change on previous week
107
Swiss ransomware victims, last twelve months
n'guard assessment of this week

The threat landscape eases noticeably this week: across a total of 955 BACS reports, we see broad declines in classic forms of attack such as phishing (350 reports, minus 30 per cent), fraud attempts (299 reports, minus 15 per cent) and spam (150 reports, minus 34 per cent). However, there is a worrying trend in cybersquatting and corporate identity theft, up 77 per cent on the previous week, which suggests that attackers are increasingly targeting brand identities. In the ransomware context, the 106 victims over the past 12 months remain a serious problem, even if the current cases mostly affect smaller sectors.

The key points in brief

Summary of the week.

Summary

The Swiss cyber threat landscape in calendar week 42/2026: the Swiss Federal Office for Cybersecurity (BACS) received 1’157 reports of cyber incidents. The most frequent category was phishing with 420 reports (-17% compared with the previous week). Over the past twelve months, 107 Swiss ransomware victims have been made public.

Categories

Reported incidents by category.

All reports received by the BACS in calendar week 42/2026, with change compared with the previous week.

Phishing
420
−17%
Fraud attempts
372
+6%
Spam
182
−20%
Hacking
37
−20%
Cybersquatting
23
+77%
False positive
16
+100%

Bar length is relative to the most frequently reported category of the week. These are reports received by the BACS, not necessarily successful attacks.

Ransomware

Most recently disclosed cases with a Swiss connection.

Victims that have become publicly visible on leak sites, not the total number of incidents in Switzerland.
DisclosedSectorGroup
23.10.2026 Energy & Utilities N0N
23.10.2026 Other AURORA
20.10.2026 Not Found N0N
18.10.2026 Not Found CLOAK
16.10.2026 Not Found THEGENTLEMEN
10.10.2026 Not Found MAJINAHANASHI

Methodology and sources

The data is based exclusively on publicly available sources: the reporting statistics published weekly by the Swiss Federal Office for Cybersecurity (BACS) and publicly disclosed ransomware cases via ransomware.live. n'guard does not collect its own reporting figures. Instead, it aggregates this data, puts it into context and translates it into actionable recommendations.

The figures reflect the number of cyber incidents reported, not the actual total in Switzerland. The number of unreported cases is likely to be higher for technically more sophisticated attacks than for widely recognised fraud schemes. This report contains no confidential or access-restricted information (TLP:CLEAR) and may be freely reused with attribution.

Suggested citation: n'guard Cyber Security: Weekly Cyber Report, calendar week 42/2026. Available at https://nguard.swiss/cyber-weekly-report/kw-42-2026/

How vulnerable is your company really?

In four minutes, the n'guard Security Quick Check gives you a well-founded, anonymous assessment of your attack surface, with concrete recommendations and no registration.

Start the Security Quick Check