Software supplier PK Softech to Swiss federal pension fund Publica hit by cyberattack; members' social security numbers and IBANs may be leaked

Switzerland's FDPIC said PK Softech AG reported a cyberattack on its IT infrastructure on October 8, with data extracted from several pension funds including the federal pension fund Publica, and it opened a formal investigation on October 22 ^[2]. Publica said member data has presumably leaked, possibly including names, birth dates, OASI numbers, addresses, phones, emails, pension data and IBANs, but there is no sign of publication on the dark web; according to SRF the attackers are the Akira group ^[1][3]. Publica members should note Publica never asks for passwords or login details by email, text or phone, should not pass them to third parties and should not click suspicious links ^[1].

Industries mainly affected: Finance, Government

1. Publica never asks for passwords or login details by email, text or phone; do not share them with third parties ^[1].
2. Do not click suspicious links or respond to requests for personal or bank details .