Various websites and applications of the Swiss federal administration hacked
Data from the Swiss government might have been published on the dark web after a ransomware attack on the software provider Xplain. The company accuses the ransomware group Play of being behind the attack but has no intention of paying the demanded ransom.
The Swiss police started an investigation into the cyberattack on the ITSP earlier this week. Xplain assumes that the first attack occurred on Saturday and was carried out by Play. After initially denying that government data had been published, the Zurich authorities have now confirmed that the information might be available on the dark web.
After the stolen data was encrypted and the company was blackmailed, the attackers posted some of the stolen data on the darknet.
Xplain publicly rejects any contact with the ransomware group and says it will not pay the ransom. It has informed the National Cyber Security Centre of Switzerland.