Publica (Swiss federal pension fund) via PK Softech data breach
Was I affected?
Publica (Swiss federal pension fund) via PK Softech confirmed a breach affecting an undisclosed number of people, exposing names, addresses, national id numbers and bank or financial details. You may be affected if you are insured with or receive a pension from Publica, or are a member of another Swiss pension fund that uses PK Softech software and has written to you about this attack.
| Announced | Oct 8, 2026 |
|---|---|
| When it happened | Late September 2026 |
| Country | Switzerland |
| Data exposed | Names, Addresses, National ID numbers, Bank or financial details and Other details |
| Through a vendor | PK Softech AG |
| Status | Confirmed by the company or a regulator filing |
What happened
Publica, the Swiss federal government's pension fund, said on October 8, 2026 that data was taken in a cyberattack on an external software supplier at the end of September; reporting identified the supplier as PK Softech AG, which makes software for pension funds. According to Publica's letter to members, the data probably includes names, addresses, AHV social security numbers, salaries, pension savings and details of spouses or partners. It is still unclear whether all of its roughly 66,000 active members and 40,000 pensioners are affected. Publica says pension money itself is safe, and the Office of the Attorney General has opened an investigation. Other PK Softech clients, including the Zurich city pension fund (PKZH) and the Migros pension fund, later reported that their members' data was also affected.
What should I do?
- Be suspicious of calls, letters and emails that mention your pension, salary or AHV number and ask for payment, bank details or logins.
- Do not change bank details for your pension payments in response to a message; confirm any request with your pension fund using contact details you already have.
- Watch your bank statements and mail for credit or contracts you did not apply for.
- Read the letter from your pension fund for the exact data involved and its contact line.
More data breaches in Switzerland →
Check the other services you use →
Sources
- Cyberangriff auf Softwarelieferant von Publica: Datenabfluss bestätigt (Cyberattack on Publica software supplier: data outflow confirmed) · Pensionskasse des Bundes Publica (federal media release) (in German) · official
- Cyberangriff auf Publica – diese Daten sind betroffen (Cyberattack on Publica: the data affected) · SRF (in German) · news
- Swiss federal pension fund faces data breach after cyberattack · swissinfo.ch (Keystone-SDA) · news
- Hackerangriff auf IT-Dienstleister zieht weitere Kreise (Hack on IT supplier widens) · finews.ch (in German) · news