n'guard Cyber Security TLP:CLEAR
Weekly Cyber Report · Calendar Week 44/2026

Cyber threat landscape
Switzerland.

The week's reporting figures from public Swiss statistics, aggregated, put into context and prepared for decision-makers.

Published: 08.11.2026 Source: BACS · ransomware.live Free to use with attribution
View all editions
1’255
Reports to the BACS in calendar week 44
+17%
Phishing, change on previous week
111
Swiss ransomware victims, last twelve months
n'guard assessment of this week

This week's threat landscape is shaped by a sharp rise in phishing attacks, with 516 reports, an increase of 16 per cent on the previous week. Also notable is the 20 per cent rise in spam reports to 196 cases, as well as a 26 per cent rise in hacking attempts, which points to intensified activity by cyber criminals. The latest ransomware attacks on Swiss companies in Manufacturing, Retail and Energy show that larger organisations are also in the crosshairs, while the total of 108 ransomware victims over the past twelve months represents a persistent risk for SMEs.

The key points in brief

Summary of the week.

Summary

The Swiss cyber threat landscape in calendar week 44/2026: the Swiss Federal Office for Cybersecurity (BACS) received 1’255 reports of cyber incidents. The most frequent category was phishing with 517 reports (+17% compared with the previous week). Over the past twelve months, 111 Swiss ransomware victims have been made public.

Categories

Reported incidents by category.

All reports received by the BACS in calendar week 44/2026, with change compared with the previous week.

Phishing
517
+17%
Fraud attempts
323
−6%
Spam
196
+20%
Hacking
44
+26%
False positive
28
+33%
Cybersquatting
17
+13%

Bar length is relative to the most frequently reported category of the week. These are reports received by the BACS, not necessarily successful attacks.

Ransomware

Most recently disclosed cases with a Swiss connection.

Victims that have become publicly visible on leak sites, not the total number of incidents in Switzerland.
DisclosedSectorGroup
07.11.2026 Financial Services RHYSIDA
05.11.2026 Technology THEGENTLEMEN
05.11.2026 Manufacturing THEGENTLEMEN
04.11.2026 Retail & E-Commerce MEDUSALOCKER
04.11.2026 Manufacturing AKIRA
31.10.2026 Manufacturing EMPERADOR

Methodology and sources

The data is based exclusively on publicly available sources: the reporting statistics published weekly by the Swiss Federal Office for Cybersecurity (BACS) and publicly disclosed ransomware cases via ransomware.live. n'guard does not collect its own reporting figures. Instead, it aggregates this data, puts it into context and translates it into actionable recommendations.

The figures reflect the number of cyber incidents reported, not the actual total in Switzerland. The number of unreported cases is likely to be higher for technically more sophisticated attacks than for widely recognised fraud schemes. This report contains no confidential or access-restricted information (TLP:CLEAR) and may be freely reused with attribution.

Suggested citation: n'guard Cyber Security: Weekly Cyber Report, calendar week 44/2026. Available at https://nguard.swiss/cyber-weekly-report/kw-44-2026/

How vulnerable is your company really?

In four minutes, the n'guard Security Quick Check gives you a well-founded, anonymous assessment of your attack surface, with concrete recommendations and no registration.

Start the Security Quick Check