{ "type": "bundle", "id": "bundle--84ab34ee-bf03-5f80-828c-1101f840761c", "objects": [ { "type": "identity", "spec_version": "2.1", "id": "identity--8baba7a8-0fc4-5470-82aa-17d8defc8720", "created": "2026-10-25T14:13:00.153041+00:00", "modified": "2026-10-25T14:13:00.153041+00:00", "x_ally_original_id": "org:487465db-eaea-4604-96e2-8eaba16958e6", "name": "Publica", "identity_class": "organization" }, { "type": "identity", "spec_version": "2.1", "id": "identity--96749646-44d2-5ec4-8383-1481bf236506", "created": "2026-10-25T14:13:00.153041+00:00", "modified": "2026-10-25T14:13:00.153041+00:00", "x_ally_original_id": "org:921261a4-d8ac-4f99-a01f-c38847b5268a", "name": "Bernische Pensionskasse", "identity_class": "organization" }, { "type": "identity", "spec_version": "2.1", "id": "identity--c903567a-a979-5f75-8c27-68b5abd4e734", "created": "2026-10-25T14:13:00.153041+00:00", "modified": "2026-10-25T14:13:00.153041+00:00", "x_ally_original_id": "org:85f2fbfb-cc9b-4681-b8d0-44c03602aef5", "name": "Pensionskasse Stadt Zürich", "identity_class": "organization" }, { "type": "identity", "spec_version": "2.1", "id": "identity--d58eeaf0-c619-506c-82ee-0f777e7d1778", "created": "2026-10-25T14:13:00.153041+00:00", "modified": "2026-10-25T14:13:00.153041+00:00", "x_ally_original_id": "org:e3269ad6-f8c2-473a-93ec-e92263041921", "name": "PK Softech AG", "identity_class": "organization" }, { "type": "incident", "spec_version": "2.1", "id": "incident--5f4f460a-fd3c-5a5c-885d-2b795f73a8c8", "created": "2026-10-25T14:13:00.153041+00:00", "modified": "2026-10-25T14:13:00.153041+00:00", "x_ally_original_id": "inc:2887ff54-6a25-4bdb-857d-1b4c770f7587", "name": "PK Softech pension-fund data theft" }, { "type": "incident", "spec_version": "2.1", "id": "incident--e1fa48b3-1739-50df-81cb-613a1dd501fe", "created": "2026-10-25T14:13:00.153041+00:00", "modified": "2026-10-25T14:13:00.153041+00:00", "x_ally_original_id": "brh:b77aad60-130e-405f-9bfe-88009cec40dc", "name": "PK Softech pension-fund data theft" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0014679a-6282-5992-82e3-8301aae2cf45", "created": "2026-10-25T14:13:00.153041+00:00", "modified": "2026-10-25T14:13:00.153041+00:00", "x_ally_original_id": "clm:76ed42cc-c6a2-46e0-8016-7ff759f2cece", "relationship_type": "resulted-in", "source_ref": "incident--5f4f460a-fd3c-5a5c-885d-2b795f73a8c8", "target_ref": "x-ally-event--c3a9c8f2-4cb6-5cac-823c-e0d701f468aa", "confidence": 100, "external_references": [ { "source_name": "Federal Data Protection and Information Commissioner", "url": "https://www.edoeb.admin.ch/en/fdpic-launched-investigation-following-cyber-attack-on-software-supplier", "external_id": "cit:8544ec5b-1854-4426-ba29-14671219936f", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:d02176cb321dbcb170c4884131010cea642f19f305735a10a6db872e62a39d55" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--24e231f6-60f1-5a85-8a81-957a591d94d1", "created": "2026-10-25T14:13:00.153041+00:00", "modified": "2026-10-25T14:13:00.153041+00:00", "x_ally_original_id": "clm:ca923d23-abbf-4e7e-a6ae-6d3c3ca22a3b", "relationship_type": "resulted-in", "source_ref": "incident--5f4f460a-fd3c-5a5c-885d-2b795f73a8c8", "target_ref": "x-ally-event--33872182-4986-5cbd-8e58-d4b012aea9dd", "confidence": 100, "external_references": [ { "source_name": "Federal Data Protection and Information Commissioner", "url": "https://www.edoeb.admin.ch/en/fdpic-launched-investigation-following-cyber-attack-on-software-supplier", "external_id": "cit:3754c1c4-e2ee-4aac-8f44-4e95f693ab3d", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:d02176cb321dbcb170c4884131010cea642f19f305735a10a6db872e62a39d55" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3377e4ed-84a8-5a56-860d-266c8dc1cd0e", "created": "2026-10-25T14:13:00.153041+00:00", "modified": "2026-10-25T14:13:00.153041+00:00", "x_ally_original_id": "clm:8b38b21d-1bd7-4021-8622-16b08bfd3364", "relationship_type": "resulted-in", "source_ref": "incident--5f4f460a-fd3c-5a5c-885d-2b795f73a8c8", "target_ref": "x-ally-event--3f7b9b93-a67f-5d90-8f04-0a302d34cb5a", "confidence": 100, "external_references": [ { "source_name": "PK Softech AG", "url": "https://www.pksoftech.ch/de/aktuelles", "external_id": "cit:2c103dc4-bb25-4749-acfb-d2ef640a7d17", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:03a9052e3ed72cfb4a75a985e70c382342a3302148baf6cc86174a13df062e1e" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4b562998-053b-52ea-87ef-10484b5701ea", "created": "2026-10-25T14:13:00.153041+00:00", "modified": "2026-10-25T14:13:00.153041+00:00", "x_ally_original_id": "clm:30920431-8e35-4258-8978-f8c68c0fb190", "relationship_type": "resulted-in", "source_ref": "incident--5f4f460a-fd3c-5a5c-885d-2b795f73a8c8", "target_ref": "x-ally-event--34f7764e-501e-5925-80b5-1e855a537de8", "confidence": 100, "external_references": [ { "source_name": "PK Softech AG", "url": "https://www.pksoftech.ch/de/newsreader/Cyberangriff-auf-die-PKSoftechAG", "external_id": "cit:ea4ce065-d7c7-4870-8a6f-11b88572891e", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:237c574df4455b4986ff0894f78bf24a0c42b4b3a3c307b5480c7146d466bd4c" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4cb462e9-24e1-5159-8d32-674f2e202396", "created": "2026-10-25T14:13:00.153041+00:00", "modified": "2026-10-25T14:13:00.153041+00:00", "x_ally_original_id": "clm:b7e1dd8b-e697-4d09-93b6-7ee2e49e04dc", "relationship_type": "vendor-of", "source_ref": "identity--d58eeaf0-c619-506c-82ee-0f777e7d1778", "target_ref": "identity--8baba7a8-0fc4-5470-82aa-17d8defc8720", "confidence": 100, "external_references": [ { "source_name": "Publica", "url": "https://www.publica.ch/de/cyberangriff-auf-softwarelieferanten", "external_id": "cit:3ba99f42-a679-4d04-8df7-7e0f1f381cd2", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:dfa8596f255ef9138caf7005c9085696bc930881339d602c6a023aaab2d8e9f2" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5885f34c-d8b4-5b14-89fd-b7f1d76e0b7c", "created": "2026-10-25T14:13:00.153041+00:00", "modified": "2026-10-25T14:13:00.153041+00:00", "x_ally_original_id": "clm:5e8ca38d-8edb-43a2-9a87-1adafa079962", "relationship_type": "vendor-of", "source_ref": "identity--d58eeaf0-c619-506c-82ee-0f777e7d1778", "target_ref": "identity--96749646-44d2-5ec4-8383-1481bf236506", "confidence": 100, "external_references": [ { "source_name": "Bernische Pensionskasse", "url": "https://bpk.ch/hauptnavigation/cybervorfall", "external_id": "cit:8977ae34-46ac-4249-926b-e417eb95cfd4", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:a4909331a80149c432f448a04e763f8a2cb77e4c9cfe85c73842b4ed4711b7d9" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8124a96f-6fd1-5785-89cd-67e2927e97d3", "created": "2026-10-25T14:13:00.153041+00:00", "modified": "2026-10-25T14:13:00.153041+00:00", "x_ally_original_id": "clm:f9ea5bc6-e88e-4631-ac30-feea39fe95cd", "relationship_type": "affected-organization", "source_ref": "incident--5f4f460a-fd3c-5a5c-885d-2b795f73a8c8", "target_ref": "identity--c903567a-a979-5f75-8c27-68b5abd4e734", "confidence": 100, "external_references": [ { "source_name": "Pensionskasse Stadt Zürich", "url": "https://www.pkzh.ch/de/aktuelles/cyberangriff-softech.html", "external_id": "cit:cd141b48-d383-465d-97d9-14eb35128d33", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:124c27396fe79754872ec09f23f907b37dc25bf732df88647a565afa39d48805" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a0df6737-d3a4-5964-8b9b-9aa1b3a5643f", "created": "2026-10-25T14:13:00.153041+00:00", "modified": "2026-10-25T14:13:00.153041+00:00", "x_ally_original_id": "clm:a0fb4b9e-5be7-478c-9cdf-62ab4fe087bd", "relationship_type": "resulted-in", "source_ref": "incident--5f4f460a-fd3c-5a5c-885d-2b795f73a8c8", "target_ref": "x-ally-event--82bb95c4-6477-5e6f-8c11-999adc479abb", "confidence": 100, "external_references": [ { "source_name": "Bernische Pensionskasse", "url": "https://bpk.ch/hauptnavigation/cybervorfall", "external_id": "cit:e2830472-5d97-4ab2-aed5-03780548237a", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:a4909331a80149c432f448a04e763f8a2cb77e4c9cfe85c73842b4ed4711b7d9" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ddf99f02-7476-5c98-85fd-5e1008474673", "created": "2026-10-25T14:13:00.153041+00:00", "modified": "2026-10-25T14:13:00.153041+00:00", "x_ally_original_id": "clm:f38d673b-0a45-453f-a2b7-9e872e9152a1", "relationship_type": "affected-organization", "source_ref": "incident--5f4f460a-fd3c-5a5c-885d-2b795f73a8c8", "target_ref": "identity--d58eeaf0-c619-506c-82ee-0f777e7d1778", "confidence": 100, "external_references": [ { "source_name": "PK Softech AG", "url": "https://www.pksoftech.ch/de/newsreader/Cyberangriff-auf-die-PKSoftechAG", "external_id": "cit:73d0a126-49c9-449e-8b20-9c8a782df226", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:237c574df4455b4986ff0894f78bf24a0c42b4b3a3c307b5480c7146d466bd4c" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e5ad6e42-af07-5719-89f9-586b81defc25", "created": "2026-10-25T14:13:00.153041+00:00", "modified": "2026-10-25T14:13:00.153041+00:00", "x_ally_original_id": "clm:404fa8bb-f0f1-4dae-9560-b3bb6714109c", "relationship_type": "affected-organization", "source_ref": "incident--5f4f460a-fd3c-5a5c-885d-2b795f73a8c8", "target_ref": "identity--8baba7a8-0fc4-5470-82aa-17d8defc8720", "confidence": 100, "external_references": [ { "source_name": "Federal Data Protection and Information Commissioner", "url": "https://www.edoeb.admin.ch/en/fdpic-launched-investigation-following-cyber-attack-on-software-supplier", "external_id": "cit:0a7ae960-3d4a-4138-b8dd-a14d1d3e1da5", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:d02176cb321dbcb170c4884131010cea642f19f305735a10a6db872e62a39d55" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ee09f78f-4ebc-507e-8cf1-691e50414481", "created": "2026-10-25T14:13:00.153041+00:00", "modified": "2026-10-25T14:13:00.153041+00:00", "x_ally_original_id": "clm:e4eac794-73bc-4ac4-82b1-13032b9a4113", "relationship_type": "resulted-in", "source_ref": "incident--5f4f460a-fd3c-5a5c-885d-2b795f73a8c8", "target_ref": "x-ally-event--0e623414-c2c1-50e0-87aa-76723f14e77a", "confidence": 100, "external_references": [ { "source_name": "Federal Data Protection and Information Commissioner", "url": "https://www.edoeb.admin.ch/en/fdpic-launched-investigation-following-cyber-attack-on-software-supplier", "external_id": "cit:8774ad1e-54c6-442f-9b0b-b8ab2b9545f9", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:d02176cb321dbcb170c4884131010cea642f19f305735a10a6db872e62a39d55" } ] }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--174d88f5-266f-5c97-82c0-6fed957bbbf9", "created": "2026-10-25T14:13:00.153041+00:00", "modified": "2026-10-25T14:13:00.153041+00:00", "x_ally_original_id": "clm:90b32fe7-38e0-4c26-9b07-46bc11b6dbff", "confidence": 100, "external_references": [ { "source_name": "Publica", "url": "https://www.publica.ch/de/cyberangriff-auf-softwarelieferanten", "external_id": "cit:d96a75df-0167-4a1b-84b4-da8cde88fc2f", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:dfa8596f255ef9138caf7005c9085696bc930881339d602c6a023aaab2d8e9f2" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "Publica said its production pension system and original data remained on its own infrastructure, separate from the vendor’s test environment; pension payments and assets were unaffected." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--1aa5a941-aad1-5882-82ae-3bb7acba8611", "created": "2026-10-25T14:13:00.153041+00:00", "modified": "2026-10-25T14:13:00.153041+00:00", "x_ally_original_id": "clm:1f757deb-8b56-442b-bad8-d4dbfb8dcb57", "confidence": 100, "external_references": [ { "source_name": "Pensionskasse Stadt Zürich", "url": "https://www.pkzh.ch/de/aktuelles/cyberangriff-softech.html", "external_id": "cit:edcd6e8b-9458-4682-a896-4b67a238515e", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:124c27396fe79754872ec09f23f907b37dc25bf732df88647a565afa39d48805" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "PKZH said personal data of insured members and pensioners were stolen from PK Softech. The data had been supplied for migration tests ahead of a planned early-2027 system change; its current pension administration system was not attacked." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--23139326-073f-5788-844e-e58dc7ddea6d", "created": "2026-10-25T14:13:00.153041+00:00", "modified": "2026-10-25T14:13:00.153041+00:00", "x_ally_original_id": "clm:284a5dba-27ca-41d0-94a0-b23a6ba9aea8", "confidence": 100, "external_references": [ { "source_name": "Federal Data Protection and Information Commissioner", "url": "https://www.edoeb.admin.ch/en/fdpic-launched-investigation-following-cyber-attack-on-software-supplier", "external_id": "cit:288bd7a9-b08f-42c4-944d-cd78fa09ec20", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:d02176cb321dbcb170c4884131010cea642f19f305735a10a6db872e62a39d55" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "The formal regulatory investigation concerns suspected data-protection violations and seeks to establish transferred data, the legal basis and implementation of those transfers, and the scope of the theft; it is not a completed finding of liability." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--2c2e6363-1b79-54d7-88aa-267d4958d842", "created": "2026-10-25T14:13:00.153041+00:00", "modified": "2026-10-25T14:13:00.153041+00:00", "x_ally_original_id": "clm:84878d99-e158-47ce-a45a-cc2d85ce2ca1", "confidence": 100, "external_references": [ { "source_name": "PK Softech AG", "url": "https://www.pksoftech.ch/de/newsreader/Cyberangriff-auf-die-PKSoftechAG", "external_id": "cit:c9bd132b-b0c7-455b-a452-8ecf2c8b280f", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:237c574df4455b4986ff0894f78bf24a0c42b4b3a3c307b5480c7146d466bd4c" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "PK Softech reported that unknown attackers used malware to access part of its IT infrastructure in late September 2026. The public notice does not give an exact attack or detection date." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--350731e7-c74d-5a7c-85fb-20155e171e19", "created": "2026-10-25T14:13:00.153041+00:00", "modified": "2026-10-25T14:13:00.153041+00:00", "x_ally_original_id": "clm:127245ed-dd2b-4c78-8247-347f6fcf5850", "confidence": 100, "external_references": [ { "source_name": "Federal Data Protection and Information Commissioner", "url": "https://www.edoeb.admin.ch/en/fdpic-launched-investigation-following-cyber-attack-on-software-supplier", "external_id": "cit:2c6bf242-6dc3-4d9b-a8b7-d2182d0d53aa", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:d02176cb321dbcb170c4884131010cea642f19f305735a10a6db872e62a39d55" } ], "x_ally_claim_object": { "kind": "value", "datatype": "date", "value": "2026-10-14" } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--396fc0b8-a16b-59bc-8a82-7ff57b47600e", "created": "2026-10-25T14:13:00.153041+00:00", "modified": "2026-10-25T14:13:00.153041+00:00", "x_ally_original_id": "clm:1bddaaf6-74aa-4d1d-a647-43311517dca0", "confidence": 100, "external_references": [ { "source_name": "PK Softech AG", "url": "https://www.pksoftech.ch/de/newsreader/Cyberangriff-auf-die-PKSoftechAG", "external_id": "cit:db91520d-214b-4d46-ab91-137322131428", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:237c574df4455b4986ff0894f78bf24a0c42b4b3a3c307b5480c7146d466bd4c" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "PK Softech said data must be assumed to have left its systems, while the nature and precise extent remained under investigation." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--5574685e-e07b-58a7-80f7-6f96effccff9", "created": "2026-10-25T14:13:00.153041+00:00", "modified": "2026-10-25T14:13:00.153041+00:00", "x_ally_original_id": "clm:2169f3bc-17a4-4912-aec7-e717e164fe51", "confidence": 100, "external_references": [ { "source_name": "Federal Data Protection and Information Commissioner", "url": "https://www.edoeb.admin.ch/en/fdpic-launched-investigation-following-cyber-attack-on-software-supplier", "external_id": "cit:066fd7e1-0af8-45b6-82c4-2ddfc86e7cce", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:d02176cb321dbcb170c4884131010cea642f19f305735a10a6db872e62a39d55" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "The FDPIC received PK Softech’s report on October 8, began informal preliminary inquiries with Publica on October 14, and opened a formal investigation into PK Softech on October 22." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--59508232-0d14-54cc-80d0-9deaf990e778", "created": "2026-10-25T14:13:00.153041+00:00", "modified": "2026-10-25T14:13:00.153041+00:00", "x_ally_original_id": "clm:dd869ad2-6e4f-4033-a498-8646da019d57", "confidence": 100, "external_references": [ { "source_name": "Federal Data Protection and Information Commissioner", "url": "https://www.edoeb.admin.ch/en/fdpic-launched-investigation-following-cyber-attack-on-software-supplier", "external_id": "cit:1a8c9c3e-a599-46bd-8359-06f919c4438c", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:d02176cb321dbcb170c4884131010cea642f19f305735a10a6db872e62a39d55" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "The FDPIC said data had been extracted from several pension funds, including Publica, during the attack on PK Softech." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--683c6a6a-644f-56f3-8477-fb334a363de4", "created": "2026-10-25T14:13:00.153041+00:00", "modified": "2026-10-25T14:13:00.153041+00:00", "x_ally_original_id": "clm:f88e4c86-f6eb-4a86-b5e8-472c4d229d14", "confidence": 100, "external_references": [ { "source_name": "PK Softech AG", "url": "https://www.pksoftech.ch/de/newsreader/Cyberangriff-auf-die-PKSoftechAG", "external_id": "cit:6559b820-f39a-4acb-b071-496e7652569a", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:237c574df4455b4986ff0894f78bf24a0c42b4b3a3c307b5480c7146d466bd4c" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "PK Softech disconnected the affected environment, engaged external specialists, informed authorities and filed a criminal complaint. It said unrestricted customer service had resumed on October 2." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--6a66da3a-0b65-5e51-87cb-8ab71bcf6c98", "created": "2026-10-25T14:13:00.153041+00:00", "modified": "2026-10-25T14:13:00.153041+00:00", "x_ally_original_id": "clm:e460fa33-b2e2-4cc2-a15e-0bc28baf1c01", "confidence": 100, "external_references": [ { "source_name": "Publica", "url": "https://www.publica.ch/de/cyberangriff-auf-softwarelieferanten", "external_id": "cit:b84d8835-7078-4352-a138-3d6327fc5a74", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:dfa8596f255ef9138caf7005c9085696bc930881339d602c6a023aaab2d8e9f2" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "Publica identified potentially involved names, birth dates, AHV social-insurance numbers, contact details, pension and salary information, marital and partner information, and IBANs. The precise individual scope remained unresolved." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--74c052f8-f8ac-554d-84dd-22d7a106f902", "created": "2026-10-25T14:13:00.153041+00:00", "modified": "2026-10-25T14:13:00.153041+00:00", "x_ally_original_id": "clm:f11d6725-8456-468a-932a-d8fdf7d9ddaf", "confidence": 100, "external_references": [ { "source_name": "Publica", "url": "https://www.publica.ch/de/cyberangriff-auf-softwarelieferanten", "external_id": "cit:b3b9b89e-8c8c-4ef6-83a4-de839d912ad0", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:dfa8596f255ef9138caf7005c9085696bc930881339d602c6a023aaab2d8e9f2" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "Publica’s October 20 update said whether data from its members had been stolen, and whose data, remained under review; it reported no indication of publication on the dark web." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--74f9f0e8-21d8-56b4-8848-d9bb6c9e7312", "created": "2026-10-25T14:13:00.153041+00:00", "modified": "2026-10-25T14:13:00.153041+00:00", "x_ally_original_id": "clm:91b439a2-1fa6-4231-8f76-f10c98863e46", "confidence": 100, "external_references": [ { "source_name": "Federal Data Protection and Information Commissioner", "url": "https://www.edoeb.admin.ch/en/fdpic-launched-investigation-following-cyber-attack-on-software-supplier", "external_id": "cit:dc90e1f1-05f2-4bb6-b653-e6ab904ed453", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:d02176cb321dbcb170c4884131010cea642f19f305735a10a6db872e62a39d55" } ], "x_ally_claim_object": { "kind": "value", "datatype": "date", "value": "2026-10-22" } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--7fe4cb60-2269-56fe-8451-328dbca3b2d3", "created": "2026-10-25T14:13:00.153041+00:00", "modified": "2026-10-25T14:13:00.153041+00:00", "x_ally_original_id": "clm:e2e6bd4c-5245-45d7-b7bc-f65c626e4c9d", "confidence": 100, "external_references": [ { "source_name": "PK Softech AG", "url": "https://www.pksoftech.ch/de/newsreader/Cyberangriff-auf-die-PKSoftechAG", "external_id": "cit:b2ed4249-2a3c-4bc3-aac1-e14958fb6d7d", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:237c574df4455b4986ff0894f78bf24a0c42b4b3a3c307b5480c7146d466bd4c" } ], "x_ally_claim_object": { "kind": "value", "datatype": "date", "value": "2026-10-02" } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--9cc6adaa-ff0d-5de7-8bc9-e8c499650abf", "created": "2026-10-25T14:13:00.153041+00:00", "modified": "2026-10-25T14:13:00.153041+00:00", "x_ally_original_id": "clm:7d4f7246-9ca9-4424-aab9-2e6073840b5b", "confidence": 100, "external_references": [ { "source_name": "Pensionskasse Stadt Zürich", "url": "https://www.pkzh.ch/de/aktuelles/cyberangriff-softech.html", "external_id": "cit:07f933fc-6d22-4248-81cf-f7396698e2a8", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:124c27396fe79754872ec09f23f907b37dc25bf732df88647a565afa39d48805" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "PKZH listed potentially affected names, birth dates, AHV numbers, contact details, salary and pension balances, marital and partner information, and IBANs. It said pension assets and payments were safe and had filed a criminal complaint." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--b8bbb342-70a9-50fa-8d8e-f20b8663f83a", "created": "2026-10-25T14:13:00.153041+00:00", "modified": "2026-10-25T14:13:00.153041+00:00", "x_ally_original_id": "clm:c112f73e-f053-41b9-8e56-681b52f6b0a7", "confidence": 100, "external_references": [ { "source_name": "PK Softech AG", "url": "https://www.pksoftech.ch/de/aktuelles", "external_id": "cit:7ab8867b-2375-44ee-a602-ec699d0598f3", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:03a9052e3ed72cfb4a75a985e70c382342a3302148baf6cc86174a13df062e1e" } ], "x_ally_claim_object": { "kind": "value", "datatype": "date", "value": "2026-10-08" } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--ce13217f-e7d1-53e4-8299-b3e168cb7d6f", "created": "2026-10-25T14:13:00.153041+00:00", "modified": "2026-10-25T14:13:00.153041+00:00", "x_ally_original_id": "clm:1a0a26c0-8bc2-4c40-a139-cec2d0f96740", "confidence": 100, "external_references": [ { "source_name": "PK Softech AG", "url": "https://www.pksoftech.ch/de/aktuelles", "external_id": "cit:a2767efe-122f-4360-8e50-8bd53318bcef", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:03a9052e3ed72cfb4a75a985e70c382342a3302148baf6cc86174a13df062e1e" } ], "x_ally_claim_object": { "kind": "value", "datatype": "date", "value": "2026-10-08" } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--d33b68ed-ff71-5945-80e9-2841a98851b8", "created": "2026-10-25T14:13:00.153041+00:00", "modified": "2026-10-25T14:13:00.153041+00:00", "x_ally_original_id": "clm:31861a39-3488-4285-9cae-8ce1f8646f74", "confidence": 100, "external_references": [ { "source_name": "Pensionskasse Stadt Zürich", "url": "https://www.pkzh.ch/de/aktuelles/cyberangriff-softech.html", "external_id": "cit:b05a87b4-b851-40cf-a64a-56ccb86d4071", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:124c27396fe79754872ec09f23f907b37dc25bf732df88647a565afa39d48805" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "PKZH said it learned on October 13 that its members’ data might be affected, later confirmed that suspicion, and notified members. Exact individuals and fields remained under investigation." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--e4f90011-d2cb-5e9e-8a74-4cd371da5411", "created": "2026-10-25T14:13:00.153041+00:00", "modified": "2026-10-25T14:13:00.153041+00:00", "x_ally_original_id": "clm:872403c3-f7b0-4711-8adc-c6ee4e520afe", "confidence": 100, "external_references": [ { "source_name": "Publica", "url": "https://www.publica.ch/de/cyberangriff-auf-softwarelieferanten", "external_id": "cit:3e0b4013-8991-4768-bb7d-8a0aecb5f77c", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:dfa8596f255ef9138caf7005c9085696bc930881339d602c6a023aaab2d8e9f2" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "Publica described its October 21 website interruption as precautionary vulnerability patching unrelated to the PK Softech cyberattack; it sent another member newsletter on October 22." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--f054bd8f-068b-5e7d-8537-c03b1212c237", "created": "2026-10-25T14:13:00.153041+00:00", "modified": "2026-10-25T14:13:00.153041+00:00", "x_ally_original_id": "clm:8246ec01-da40-4ea8-b85e-5ef5f13cac86", "confidence": 100, "external_references": [ { "source_name": "Bernische Pensionskasse", "url": "https://bpk.ch/hauptnavigation/cybervorfall", "external_id": "cit:38de4e39-9d19-4d1e-99ad-4b52f221d169", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:a4909331a80149c432f448a04e763f8a2cb77e4c9cfe85c73842b4ed4711b7d9" } ], "x_ally_claim_object": { "kind": "value", "datatype": "date", "value": "2026-10-19" } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--f0848efa-fe00-5080-8eb1-68881edd3b2a", "created": "2026-10-25T14:13:00.153041+00:00", "modified": "2026-10-25T14:13:00.153041+00:00", "x_ally_original_id": "clm:759a2d85-511d-4a7e-9051-085814a5a0fc", "confidence": 100, "external_references": [ { "source_name": "Federal Data Protection and Information Commissioner", "url": "https://www.edoeb.admin.ch/en/fdpic-launched-investigation-following-cyber-attack-on-software-supplier", "external_id": "cit:81e3972e-5289-4286-8f37-c40883a2da2f", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:d02176cb321dbcb170c4884131010cea642f19f305735a10a6db872e62a39d55" } ], "x_ally_claim_object": { "kind": "value", "datatype": "date", "value": "2026-10-23" } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--fb8c2900-b528-5819-8097-19ebbeebb111", "created": "2026-10-25T14:13:00.153041+00:00", "modified": "2026-10-25T14:13:00.153041+00:00", "x_ally_original_id": "clm:eacb29b5-c05e-4719-aa20-638f62fbec00", "confidence": 100, "external_references": [ { "source_name": "Bernische Pensionskasse", "url": "https://bpk.ch/hauptnavigation/cybervorfall", "external_id": "cit:455e454e-4099-4c10-9fbc-1449b21f44a1", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:a4909331a80149c432f448a04e763f8a2cb77e4c9cfe85c73842b4ed4711b7d9" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "BPK’s October 15 update corrected earlier supplier information: personal data must be assumed to have left PK Softech, but BPK could not confirm that its own members’ data were among them. That uncertainty remained in its October 20 update." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--fcf166a2-ec97-5818-8084-8ffce5cc6059", "created": "2026-10-25T14:13:00.153041+00:00", "modified": "2026-10-25T14:13:00.153041+00:00", "x_ally_original_id": "clm:3165f2eb-4f32-4a46-bff8-608fe9386f33", "confidence": 100, "external_references": [ { "source_name": "Bernische Pensionskasse", "url": "https://bpk.ch/hauptnavigation/cybervorfall", "external_id": "cit:b8b6b4d6-b3d7-4e79-96ec-f983a72e9d63", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:a4909331a80149c432f448a04e763f8a2cb77e4c9cfe85c73842b4ed4711b7d9" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "BPK said pension payments, assets and operations were unaffected and that it filed a criminal complaint on October 19." } }, { "type": "x-ally-event", "spec_version": "2.1", "id": "x-ally-event--0e623414-c2c1-50e0-87aa-76723f14e77a", "created": "2026-10-25T14:13:00.153041+00:00", "modified": "2026-10-25T14:13:00.153041+00:00", "x_ally_original_id": "evt:6c422129-f9a4-41bc-97c8-90fb600f83d9", "name": "FDPIC opens formal investigation into PK Softech" }, { "type": "x-ally-event", "spec_version": "2.1", "id": "x-ally-event--33872182-4986-5cbd-8e58-d4b012aea9dd", "created": "2026-10-25T14:13:00.153041+00:00", "modified": "2026-10-25T14:13:00.153041+00:00", "x_ally_original_id": "evt:7a21c05b-77b8-4cc5-ab93-d2b8ccbc6fa9", "name": "Regulator publishes investigation announcement" }, { "type": "x-ally-event", "spec_version": "2.1", "id": "x-ally-event--34f7764e-501e-5925-80b5-1e855a537de8", "created": "2026-10-25T14:13:00.153041+00:00", "modified": "2026-10-25T14:13:00.153041+00:00", "x_ally_original_id": "evt:529632be-ae4b-4991-97c2-aaf1dac495a1", "name": "PK Softech reports customer service restored" }, { "type": "x-ally-event", "spec_version": "2.1", "id": "x-ally-event--3f7b9b93-a67f-5d90-8f04-0a302d34cb5a", "created": "2026-10-25T14:13:00.153041+00:00", "modified": "2026-10-25T14:13:00.153041+00:00", "x_ally_original_id": "evt:56c829d9-83e5-4bb4-86d8-e39cc75b543a", "name": "Vendor publishes incident notice" }, { "type": "x-ally-event", "spec_version": "2.1", "id": "x-ally-event--82bb95c4-6477-5e6f-8c11-999adc479abb", "created": "2026-10-25T14:13:00.153041+00:00", "modified": "2026-10-25T14:13:00.153041+00:00", "x_ally_original_id": "evt:9c101a35-9040-4184-a7ec-ff4aa44b438d", "name": "BPK files criminal complaint" }, { "type": "x-ally-event", "spec_version": "2.1", "id": "x-ally-event--c3a9c8f2-4cb6-5cac-823c-e0d701f468aa", "created": "2026-10-25T14:13:00.153041+00:00", "modified": "2026-10-25T14:13:00.153041+00:00", "x_ally_original_id": "evt:64f298c7-181f-40a4-acec-d221cbdaa8ee", "name": "FDPIC begins preliminary inquiries with Publica" } ] }