Swiss government says SharePoint-linked data breach affected hundreds of accounts

Date:
Fri, 07 Aug 2026 09:56:47 +0000

Description:
No one has claimed the attack yet.

FULL STORY ======================================================================Copy link Facebook X Whatsapp Reddit Pinterest Flipboard Threads Email Share this article 0 Join the conversation Follow us Add us as a preferred source on Google Newsletter Subscribe to our newsletter Swiss government confirms attackers breached BITs SharePoint servers Investigators suspect exploitation of recent SharePoint flaws No sensitive or confidential data is believed to have been stored on the platform Cybercriminals broke into the IT network of the Swiss government and stole data from roughly 200 accounts. As a result, the Swiss government disconnected some of its servers from the wider internet and launched an investigation.

In an announcement, the Swiss government said that on July 28 2026 its security specialists noticed abnormalities in the Federal Office for Information Technology and Telecommunications (BIT) SharePoint servers. Three days later, on July 31, the investigators determined that the attackers accessed data found in around 200 accounts, both user and technical. Latest Videos From TechRadar Watch full video here: Two vulnerabilities The investigation is currently ongoing, the agency said, adding that it is
getting support from Microsoft , as well. So far, the identity of the attackers is unknown, and the stolen data has not yet leaked to the dark web.

No confidential information or particularly sensitive personal data may be stored on the SharePoint platform, the announcement reads. You may like
French government internal messaging tool Tchap hit by data breach Hackers breached DHS after alarms were twice ruled 'false positives' Microsoft 365 Copilot could be turned into a one-click data theft tool

While BIT has not yet determined the initial access vector, it suspects it to be one of two flaws in SharePoint that Microsoft fixed last month:

In mid-July, Microsoft announced several vulnerabilities in SharePoint, it says in the announcement. After the publication of the corresponding security updates, the FOITT immediately started work on importing them into its own systems. Are you a pro? Subscribe to our newsletter Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed! Contact me with news and offers from other Future brands Receive email from us on behalf of our trusted partners or sponsors By submitting your information you agree to the Terms & Conditions and Privacy Policy and are aged 16 or over.

The cyberattack was carried out by previously unknown actors, which was presumably made possible by exploiting these vulnerabilities in the
SharePoint software. It did not say which vulnerabilities those are, but in its report, BleepingComputer says that it could be one of these two: CVE-2026-56164 (an actively exploited privilege escalation vulnerability), or CVE-2026-50522 (a critical remote code execution flaw later exploited to
steal SharePoint machine keys and maintain access after servers were
patched).

Given its popularity among businesses of all sizes, SharePoint is a major target for cybercriminals. So far, no threat actors claimed responsibility
for the attack, or demanded any ransom in exchange for the stolen data.

Via BleepingComputer The best antivirus for all budgets Our top picks, based on real-world testing and comparisons

Read our full guide to the best antivirus 1. Best overall: Bitdefender Total Security 2. Best for families: Norton 360 with LifeLock 3. Best for mobile: McAfee Mobile Security Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews, and opinion in your feeds.



======================================================================
Link to news story: https://www.techradar.com/pro/security/swiss-government-says-sharepoint-linked -data-breach-affected-hundreds-of-accounts


--- Mystic BBS v1.12 A49 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)