Breaches and incidents
PK Softech AG (pension-fund software): malware attack with data exfiltration hits PUBLICA, BPK, BLVK and other Swiss pension funds
PK Softech said that at the end of September 2026 unknown parties used malware to access part of its IT and “muss davon ausgegangen werden, dass Daten aus...
- Disclosed
- Verification
- Checked against a primary source
What happened
- PK Softech said that at the end of September 2026 unknown parties used malware to access part of its IT and “muss davon ausgegangen werden, dass Daten aus unseren Systemen abgeflossen sind”; type and extent under review. PUBLICA (federal pension fund) said its external software supplier was attacked in late September and confirmed a data outflow, scope still being established; it emailed insured persons on 8 Oct.
- Root cause: malware-based intrusion (per PK Softech); entry point not disclosed.
- No attacker named; the Federal Prosecutor’s Office is investigating.
- PK Softech isolated the environment, brought in specialists, filed a criminal complaint and has been fully available to customers since 2 Oct. Per swissinfo (Keystone-SDA), Bernese funds BPK and BLVK (together over 63,000 active members and 28,000 pensioners) were also affected; BPK said there is no evidence insured data was stolen but “wir koennen es nicht vollkommen ausschliessen”, and its director said many other pension funds are affected. Potentially exposed fields include date of birth, AHV number, address and pension details.