Swiss government warns data stolen in third-party ransomware attack

By Sead Fadilpašić

Swiss government warns data stolen in third-party ransomware attack

Skip to main content

Tech Radar Pro

Tech Radar Gaming

Tech Radar Pro

TechRadar the business technology experts

Search TechRadar

View Profile

België (Nederlands)

Deutschland

North America

US (English)

Australasia

New Zealand

Expert Insights

Website builders

Web hosting

Best website builder
Best web hosting
Best office chairs
Best antivirus
Expert Insights

Recommended reading

Peru government denies ransomware attack, despite hacker claims

Scania hit by cyberattack – thousands of customers potentially affected, here’s what we know

LockBit ransomware gang gets hacked, leak exposes negotiations with victims

Top medical device maker Masimo confirms cyberattack, says products may be delayed

Top US sensor maker Sensata hit by worrying ransomware attack

Broadcom hit by employee data theft after breach in supply chain

Co-op and M&S food supplier hit by ransomware attack

Swiss government warns data stolen in third-party ransomware attack

Sead Fadilpašić

1 July 2025

A breach saw Swiss government files leaked

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works.

(Image credit: sarayut Thaneerat/ via Getty Images)

Ransomware operators Sarcoma recently breached Radix
As a result, Swiss government files were posted on the dark web
Radix claims it retained intact backups

Multiple agencies of the Swiss federal government were affected by a supply chain attack that trickled down from Radix, a non-profit organization in the health promotion sector.

A short announcement published on the Swiss government website noted, “various administrative units of the Federal Administration” were among Radix’s customers.
It was further explained the company fell prey to a ransomware cyberattack in which attackers stole and encrypted data before publishing it on the dark web. After the fallout, Radix notified the National Cyber Security Centre (NCSC), which kicked off an investigation to determine exactly what type of data was affected, and who the victims were.

You may like

Peru government denies ransomware attack, despite hacker claims

Scania hit by cyberattack – thousands of customers potentially affected, here’s what we know

LockBit ransomware gang gets hacked, leak exposes negotiations with victims

Get 55% off Incogni’s Data Removal service with code TECHRADAR
Wipe your personal data off the internet with the Incogni data removal service. Stop identity thieves
and protect your privacy from unwanted spam and scam calls.

Sarcoma diagnosis
“As Radix has no direct access to Federal Administration systems, the attackers did not gain entry to these systems at any time,” the government explained.

Radix also issued a statement on its own website, detailing what had happened.
“Unfortunately, we must confirm that despite high security standards and professional support, we have become the victim of a cyberattack,” the machine-translated notification reads. “On June 29, 2025, the hacker group Sarcoma published the stolen data on a leak site.”
Radix further explained the affected people were already notified, and stressed that the data from partner organizations were not compromised.

Are you a pro? Subscribe to our newsletter
Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed!
Contact me with news and offers from other Future brandsReceive email from us on behalf of our trusted partners or sponsorsBy submitting your information you agree to the Terms & Conditions and Privacy Policy and are aged 16 or over.
“Access to the affected data was immediately revoked after the attack was discovered. There was a confirmed data leak, and various data were encrypted. However, RADIX retains all data in an intact state on backups. The exact method of the attack is currently under investigation.”
Claiming all of the data was left intact on backups suggests the company is not interested in paying the ransom demand. This would make sense, since the attackers allegedly already leaked the spoils on the dark web.
Via BleepingComputer
You might also like

Top component maker Unimicron hit by massive ransomware attack
Take a look at our guide to the best authenticator app
We’ve rounded up the best password managers

Sead Fadilpašić

Social Links Navigation

Sead is a seasoned freelance journalist based in Sarajevo, Bosnia and Herzegovina. He writes about IT (cloud, IoT, 5G, VPN) and cybersecurity (ransomware, data breaches, laws and regulations). In his career, spanning more than a decade, he’s written for numerous media outlets, including Al Jazeera Balkans. He’s also held several modules on content writing for Represent Communications.

You must confirm your public display name before commenting

Please logout and then login again, you will then be prompted to enter your display name.

Peru government denies ransomware attack, despite hacker claims

Scania hit by cyberattack – thousands of customers potentially affected, here’s what we know

LockBit ransomware gang gets hacked, leak exposes negotiations with victims

Top medical device maker Masimo confirms cyberattack, says products may be delayed

Top US sensor maker Sensata hit by worrying ransomware attack

Broadcom hit by employee data theft after breach in supply chain

Latest in Security

It’s about time – Microsoft finally rolls out better passkey integration in Windows

Sony, JBL and Bose headphones all affected by major Bluetooth security flaw which could let hackers spy on you via microphone

FBI warns Scattered Spider hackers are now going after airlines

CitrixBleed 2 flaws are officially here – so get patching or leave your systems at risk

Supermarket giant admits 2.2 million people could be hit by worrying data breach – what to do if you’re affected

Another major MOVEit flaw could be on the way – here’s what we know

Latest in News

Mark Zuckerberg goes all-in on AI and might even beat Sam Altman and OpenAI to superintelligence

Nintendo reveals that Donkey Kong Bananza is developed by the Super Mario Odyssey team – then confirms grass is still green

Nintendo is raising the prices of some of its products in Canada, but oddly not the Switch 2 – and what could this mean for other regions?

No, Windows 11 PCs aren’t ‘up to 2.3x faster’ than Windows 10 devices, as Microsoft suggests – here’s why that’s an outlandish claim

Watch out – this fake UPS text scam is trying to trick you into handing over your personal data

Even Donald Trump can’t get a good connection for a work video call

LATEST ARTICLES

Mark Zuckerberg goes all-in on AI and might even beat Sam Altman and OpenAI to superintelligence

Donkey Kong Bananza offers a no-holds-barred open world that encourages you to go bananas

Nintendo reveals that Donkey Kong Bananza is developed by the Super Mario Odyssey team – then confirms grass is still green

No need to wait for Prime Day, our favorite misting fan is on sale for the lowest price yet

Nintendo is raising the prices of some of its products in Canada, but oddly not the Switch 2 – and what could this mean for other regions?

TechRadar is part of Future US Inc, an international media group and leading digital publisher. Visit our corporate site.

Contact Future’s experts

Terms and conditions

Privacy policy

Cookies policy

Advertise with us

Web notifications

Accessibility Statement

Future US, Inc. Full 7th Floor, 130 West 42nd Street,

Please login or signup to comment

Please wait…

Read More…