Ricardo (SMG Swiss Marketplace Group) data breach
Was I affected?
Ricardo (SMG Swiss Marketplace Group) confirmed a breach affecting about 890,000 people, exposing names, addresses and phone numbers. You may be affected if you have a Ricardo account and received a notice from Ricardo in October 2026.
| Announced | Oct 9, 2026 |
|---|---|
| When it happened | Detected October 7, 2026 |
| Country | Switzerland |
| People affected | 890,000 |
| Data exposed | Names, Addresses, Phone numbers and Other details |
| Status | Confirmed by the company or a regulator filing |
What happened
Ricardo, the Swiss online marketplace owned by SMG Swiss Marketplace Group, said on October 9, 2026 that personal data from about 890,000 user accounts was exposed through a security vulnerability. It detected suspicious activity on its servers on October 7 and says the flaw has been fixed. The exposed data is limited to names, postal addresses and phone numbers, plus company names for business users. Email addresses and passwords were not affected. Ricardo notified the Federal Data Protection and Information Commissioner (FDPIC), is filing a criminal complaint and is informing affected users directly.
What should I do?
- Be careful with unexpected letters, calls, SMS or WhatsApp messages that use your name and address and ask for card details or bank or TWINT logins.
- Do not pay or 'confirm' a Ricardo purchase or sale through links in messages; check it in the Ricardo app or at ricardo.ch.
- If you run a business account, warn staff who handle Ricardo orders about invoice and payment-redirection scams.
More data breaches in Switzerland →
Check the other services you use →
Sources
- Ricardo fixes security vulnerability affecting user data · SMG Swiss Marketplace Group (EQS media release) · official
- «Keine Erpressung» – Ricardo meldet Datenleck bei 890'000 Konten (Ricardo reports data leak affecting 890,000 accounts) · SRF (in German) · news
- Personal data from 890,000 user accounts was exposed · blue News · news