Observed Signal · Oct 15, 2026 · Security Incident · Source: persoenlich.com News · Impact: 1/5 · Sentiment: Negative
Republik data breach: hackers accessed all user data
The Swiss online magazine Republik has disclosed a security incident in which unknown attackers gained read access to a copy of its user database between August and mid-October. The breach was facilitated by a vulnerability in the analytics software Metabase. According to the company, the attackers fully downloaded personal data of all accounts, including email addresses, names, and, if provided, phone numbers, birth years, and gender. Passwords and credit card data were not affected. The attackers also sampled entries from other database areas, including postal addresses and payment records. Around 2,300 anonymous commenters could potentially be re-identified. The company informed the Swiss data protection authority on October 15 and is considering filing a criminal complaint. Metabase had released an update on August 6, but the magazine missed it because it had not subscribed to security warnings. Republic believes the attack was part of a broad, automated wave, not a targeted hack.
The article is about a data breach at a Swiss media outlet, which is relevant to the AdTech/MarTech industry because it highlights the importance of data security and the risks of exposing user data, which is critical for advertising and marketing. However, the specific impact on the industry is limited and not directly related to advertising technology operations.
Track Real-Time Privacy & Data Security Signals & Market Shifts
Polaris7 autonomous intelligence agents track regulatory filings, primary sources, executive changes, and deal flow 24/7. Create your free Explorer workspace to monitor these entities.
Key Takeaways & Evidence Grounding
- Hackers gained read access to Republik's user database between August and October 2026.
- Vulnerability in Metabase analytics software was exploited.
- All user personal data including email, name, phone, birth year, gender was accessed.
- Passwords and credit card data were not compromised.
- Metabase released a fix on August 6; Republik missed it due to unsubscribed security alerts.
- The Swiss data protection authority (Edöb) was informed on October 15.
Ontology Mapping & Concepts
Related Market Signals & Shifts
Recent verified developments and strategic activity across this market segment.
Hackers Steal Data of SRF Journalists
Swiss public broadcaster SRG confirmed a cyberattack that exposed data of about 340 current and former employees, primarily journalists from its SRF regional unit's information division. The stolen data, dating from 2020, mainly includes names, functions, and professional contact details, with some private contacts. SRG stated that no passwords, financial data, journalistic sources, or communication content were compromised. The incident was detected, affected access points were disabled, and additional security measures were implemented. SRG has informed authorities and filed a criminal complaint. Internal and external experts are investigating, and there is currently no evidence of data publication or misuse.
Framework notifies all customers of data breach
Framework, a maker of modular repairable computers, notified all customers that hackers accessed personal information — including names, email addresses, phone numbers and physical addresses — after an upstream cyberattack at business-intelligence provider Metabase. Framework said payment information was not included. Metabase disclosed it was hacked via an unknown security flaw (a zero-day) that allowed attackers access to customers' databases stored on its cloud servers. Framework's spokesperson Eric Schumacher confirmed the breach affected "all customers" but did not provide a precise number.
Ricardo Data Leak Affects 890,000 Accounts
Swiss online marketplace Ricardo suffered a data breach affecting approximately 890,000 user accounts. The unauthorized access, discovered on October 7, 2026, exposed names, postal addresses, and phone numbers, as well as company names for business customers. Email addresses and passwords were not compromised. Affected users were notified on October 10, and the company has filed a criminal complaint. The Federal Data Protection and Information Commissioner (FDPIC) and the Federal Office for Cybersecurity (BACS) have been informed. No ransom demands were made. Owner Swiss Marketplace Group (SMG) has implemented enhanced security measures, including AI-based fraud detection and multi-factor authentication, though the breach occurred despite these safeguards.
Receive all future signals for Privacy & Data Security in your executive briefing
Never miss material M&A deals, leadership changes, account wins, or product rollouts. Polaris7 monitors 20,000+ primary sources 24/7, delivering verified telemetry directly into your executive briefing.