Observed Signal · Aug 5, 2026 · Cyberattack · Source: persoenlich.com News · Impact: 2/5 · Sentiment: Negative
Cyberattack Hits Canton of Graubünden
The canton of Graubünden detected a cyberattack on its SharePoint environment, possibly exploiting the same vulnerability that affected Swiss federal SharePoint servers. Graubünden's Office for IT (AFI) found two files placed on July 29 whose code was not executed; an emergency update was scheduled that evening which would take the cantonal website offline for several hours. The federal incident earlier compromised about 200 accounts, and Microsoft had warned in mid‑July about multiple SharePoint vulnerabilities. Separately, Liechtenstein reported a large data theft of 31,000 records of companies, foundations and beneficial owners; perpetrators remain unknown in all cases.
Public-sector SharePoint vulnerabilities and related intrusions highlight ongoing risks in widely used collaboration and CMS infrastructure; relevant for IT operations and any organization using similar systems, but not directly industry-shifting for AdTech.
Track Microsoft Signals & Market Shifts in Real-Time
Polaris7 autonomous intelligence agents track regulatory filings, primary sources, executive changes, and deal flow 24/7. Create your free Explorer workspace to monitor these entities.
Key Takeaways & Evidence Grounding
- The canton of Graubünden detected an attack on its SharePoint environment on July 29, 2026.
- Graubünden's Office for IT (AFI) found two files placed on the server; their code was not executed.
- The canton performed an extraordinary update on its website starting 19:00 on Wednesday, temporarily taking it offline.
- A prior attack on federal SharePoint servers reportedly compromised about 200 accounts.
- In Liechtenstein, unknown actors digitally stole 31,000 data copies of companies, foundations and trustees; perpetrators remain unknown.
Connected Companies & Entities
3 Entities mapped“The unknown attackers probably exploited vulnerabilities in Microsoft's SharePoint software; the software manufacturer had informed in mid‑J...”
“The perpetrator is still unknown, Lorenz Tanner told the news agency Keystone‑SDA....”
Ontology Mapping & Concepts
Related Market Signals & Shifts
Recent verified developments and strategic activity across this market segment.
Cybersecurity: Thousands of Swiss Computers Unprotected
An Austrian firm, Risikomonitor, found that thousands of Windows remote access points in Switzerland are exposed to the internet without adequate protection. Out of 6,431 open remote access systems, 1,458 (22.6%) allow attackers to reach the login screen without any authentication, revealing system information and enabling automated attacks. Switzerland has more than twice as many exposed remote access points as Austria and a higher rate of unprotected access (27.1% vs. 20.5%). The study attributes these weaknesses to default settings of internet providers and outdated systems. It recommends hiding remote access behind VPNs and implementing multi-factor authentication. A separate study by VZ VermögensZentrum and Lucerne University of Applied Sciences warns that Swiss SMEs underestimate cyber risks.
European Commission Confirms Cloud Cyberattack
The European Commission confirmed a cyberattack that affected part of its cloud infrastructure hosting the Europa.eu web presence. A Commission spokesperson, Nika Blazevic, said the attack was discovered and contained, mitigation measures implemented, and that internal Commission systems were not affected; the investigation is ongoing. Security outlet Bleeping Computer reported the breach first, saying hackers claimed to have extracted hundreds of gigabytes — including multiple databases — from the Commission’s Amazon Web Services account and provided screenshots as proof. The Commission’s statement did not specify what types of data were taken.
Hackers Steal Data of SRF Journalists
Swiss public broadcaster SRG confirmed a cyberattack that exposed data of about 340 current and former employees, primarily journalists from its SRF regional unit's information division. The stolen data, dating from 2020, mainly includes names, functions, and professional contact details, with some private contacts. SRG stated that no passwords, financial data, journalistic sources, or communication content were compromised. The incident was detected, affected access points were disabled, and additional security measures were implemented. SRG has informed authorities and filed a criminal complaint. Internal and external experts are investigating, and there is currently no evidence of data publication or misuse.
Track Real-Time Market Signals & Shifts
Set up custom watchlists to receive automated, evidence-grounded executive digests whenever material signals or shifts occur across your tracked landscape.