Cyber attack on software supplier

Yes. The e-mail is neither fake nor phishing. There really was a cyber attack on one of Publica’s software suppliers. The e-mail comes from uk@publica.ch and has the subject «Cyber attack on software supplier».

We send the e-mail about the cyber attack to the address you used to register on the myPublica portal. If you are not registered, we use the e-mail address your employer has given us. If we do not have an e-mail address for you, you will receive a letter in the next few days.

We are informing pension recipients about the cyber attack on our software supplier by post. They will receive our letter in the next few days.

The e-mail comes from uk@publica.ch and has the subject «Cyber attack on software supplier». Please also check your spam folder.

The investigation into whether and which personal data are actually affected is still ongoing. Experts from the federal government are working together with the software supplier to analyse the leaked data as quickly as possible. Together with the relevant authorities, we will decide how to inform the persons affected as soon as the extent of the leak is clearer.

Check before you click. Ask before you trust. Verify before you react.

Stay alert and sceptical online:

• Never respond to e-mails, text messages, messenger messages or calls asking for personal or bank details. This applies even if a well-known organisation is mentioned and the information given is correct. Reputable companies never ask for such details through these channels.
• Only click on a link if you know the sender and are sure that the message is genuine. It is best to type your bank’s web address into your browser yourself.
• If you receive an unexpected call and are in any doubt, hang up. Check the caller’s identity and contact the organisation yourself through its official channels.
• Do not let yourself be pressured («Act now», «Otherwise your account will be blocked», «The payment must be made today») or emotionally manipulated («Your account has been hacked», «I urgently need help», «This is the police»).
• Wherever possible, activate two-factor authentication for all your accounts.
• Check your bank and credit card statements and report any unfamiliar transactions to your bank.
• Look out for invoices or contracts relating to transactions you never made. They may indicate identity theft.
• If you have fallen victim to fraud or attempted fraud, inform your bank immediately and then report it to the police.

You can voluntarily report suspicious messages and cyber incidents to the National Cyber Security Centre (NCSC). Your report helps the NCSC identify trends and dangers on the internet and take targeted action against them. After answering a few questions, you will receive an automated initial assessment of your case.

Further information:

• NCSC: Staying safe online
• S-U-P-E-R.ch: cybersecurity tips (not available in English)
• cybercrimepolice.ch: police information on online fraud (not available in English)