🇨🇭Switzerland
Ransomware
268
Top: safepay
Defacements
0
No defacements
Critical incidents
39
High-severity ransomware
Severity breakdown
- Crit12%
- High612%
- Med4386%
- Low00%
Ransomware activity over time
37 incidents over the last 90d
CISA KEV — globally critical
Known-exploited vulnerabilities (not country-scoped).
- CVE-2024-27834
Apple: Apple Multiple Products Improper Authentication Vulnerability
Added 2026-11-04
- CVE-2026-119977
WordPress: WordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability
Added 2026-11-03
- CVE-2026-118527
Ivanti: Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability
Added 2026-10-30
- CVE-2026-111357
Ivanti: Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability
Added 2026-10-30
- CVE-2026-97229
GitLab: GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability
Added 2026-10-29
Recent ransomware incidents in Switzerland
| Date | Organization | Sector | Actor | Severity |
|---|---|---|---|---|
| 2026-11-04 | On | Retail & E-Commerce | medusalocker | HIGH |
| 2026-11-04 | Erowa | Manufacturing | akira | HIGH |
| 2026-11-02 | HighTec | Technology | thegentlemen | MEDIUM |
| 2026-11-02 | Labatec | Manufacturing | thegentlemen | MEDIUM |
| 2026-10-31 | Holcim | Manufacturing | emperador | MEDIUM |
| 2026-10-25 | ECOM | Retail & E-Commerce | qilin | MEDIUM |
| 2026-10-23 | SunTechnics Fabrisolar AG | Energy & Utilities | N0n | MEDIUM |
| 2026-10-23 | ARX Group SA | Other | aurora | MEDIUM |
| 2026-10-20 | Company #95 | Not Found | N0n | MEDIUM |
| 2026-10-18 | ********rta.ch | Not Found | cloak | MEDIUM |
Top targeted sectors
- Retail & E-Commerce8
- Not Found8
- Manufacturing7
- Other7
- Healthcare6
Threat actors active here
- safepay9
- thegentlemen6
- payload4
- medusalocker3
- akira3
Sister countries — Europe
Score delta vs Switzerland (100)

