Name: BACS reports and ransomware cases in Switzerland, CW 43/2026
Creator: n'guard Cyber Security
License: https://creativecommons.org/licenses/by/4.0/

n'guard assessment of this week

This week's threat landscape is largely shaped by a rise in phishing reports, which increased by 6 per cent to 443 cases and make phishing the dominant threat category. At the same time, fraud attempts eased slightly, with 343 reports (down 8 per cent), while the total of 1’198 BACS reports this week reflects a stable threat level. The continued activity of ransomware groups such as QILIN, N0N and AURORA underlines that Swiss companies remain in the sights of organised cyber criminals, which is why heightened vigilance in email communication and regular backups remain essential.

The key points in brief

Summary of the week.

Summary

The Swiss cyber threat landscape in calendar week 43/2026: the Swiss Federal Office for Cybersecurity (BACS) received 1’199 reports of cyber incidents. The most common category was phishing with 443 reports (+6% compared with the previous week). Over the past twelve months, 108 Swiss ransomware victims have been made public.

Reported incidents by category.

All reports received by the BACS in calendar week 43/2026, with the change compared with the previous week.

Phishing

443

+6%

Fraud attempts

344

−8%

Spam

163

−10%

Hacking

−5%

False positive

+31%

Cybersquatting

−39%

Bar length is relative to the most frequently reported category of the week. These are reports received by the BACS, not necessarily successful attacks.

Ransomware

Most recently disclosed cases with a Swiss connection.

Victims that have become publicly visible on leak sites, not the total number of incidents in Switzerland.
Disclosed	Sector	Group
31.10.2026	Manufacturing	EMPERADOR
25.10.2026	Retail & E-Commerce	QILIN
23.10.2026	Energy & Utilities	N0N
23.10.2026	Other	AURORA
20.10.2026	Not Found	N0N
18.10.2026	Not Found	CLOAK

Methodology and sources

The data is based exclusively on publicly available sources: the reporting statistics published weekly by the Swiss Federal Office for Cybersecurity (BACS) and publicly disclosed ransomware cases via ransomware.live. n'guard does not collect its own reporting figures. Instead, it aggregates this data, puts it into context and translates it into actionable recommendations.

The figures reflect the number of cyber incidents reported, not the actual total in Switzerland. The number of unreported cases is likely to be higher for technically more sophisticated attacks than for widely recognised fraud schemes. This report contains no confidential or access-restricted information (TLP:CLEAR) and may be freely reused with attribution.

Suggested citation: n'guard Cyber Security: Weekly Cyber Report, calendar week 43/2026. Available at https://nguard.swiss/cyber-weekly-report/kw-43-2026/

How vulnerable is your company really?

In four minutes, the n'guard Security Quick Check gives you a well-founded, anonymous assessment of your attack surface, with concrete recommendations and no registration.

Start the Security Quick Check