Swiss SharePoint Breach Compromises 200 Accounts

Attackers compromised approximately 200 user and technical accounts on Swiss government SharePoint servers, with investigators provisionally linking the intrusion to vulnerabilities Microsoft patched in July 2026.

Switzerland’s Federal Office for Information Technology and Telecommunication blocked external access, patched systems, reset passwords, and began reinstalling affected servers while investigating with Microsoft and national cybersecurity authorities. The extent of accessed information and the initial access method remain uncertain, and no threat actor has claimed responsibility.