Skip to content

Switzerland's Cybersecurity Landscape Transforms With New Notification Obligation

The new notification obligation is boosting transparency. With sanctions looming, expect swifter responses to cyber threats.

In the center of the image a graffiti is present on the wall. At the bottom of the image floor is...
In the center of the image a graffiti is present on the wall. At the bottom of the image floor is there.

Switzerland's Cybersecurity Landscape Transforms With New Notification Obligation

Switzerland's cybersecurity landscape has seen significant changes since April 2025, with the implementation of a notification obligation for cyber attacks on critical infrastructures. The Federal Office for Cybersecurity (BACS) has been diligently recording and processing these notifications, with the financial sector being the most affected.

Since the obligation came into effect, BACS has recorded 164 cases. The BACS's Cyber Security Hub has streamlined the processing of these notifications. Operators of critical infrastructures have been complying with the notification obligation promptly.

The types of attacks reported include DDoS attacks leading the statistics at 18.1%, followed by hacking, ransomware, credential theft, data leaks, and malware. Notably, the BACS has registered multiple cases of combined attacks, such as ransomware with simultaneous data leakage. The notification obligation has also led to more organizations engaging in direct information exchange.

From October 1, 2025, sanctions for violations of the notification obligation will come into force. The BACS, as the authority responsible, can impose fines of up to 100,000 Swiss francs for non-compliance. This measure aims to ensure swift reaction to incidents and a clear assessment of the national threat situation.

In conclusion, the notification obligation for cyber attacks on critical infrastructures in Switzerland has proven effective in gathering data and encouraging information exchange. With the upcoming sanctions, the BACS continues to strengthen its commitment to maintaining robust cybersecurity, with the financial sector being a key focus.

Read also:

Latest