Akira hackers group has demanded reward after cyberattack on company PK Softech AG, software supplier for Swiss Federal Pension Fund Publica. The authors have threatened to publish or resell stolen data, while the Swiss Federal Department of Defence ( The VBS is aware of the extortion attempt.

According to Swiss public broadcaster research SRFThe attackers have demanded payment after the theft of sensitive data. Some sources have confirmed that federal authorities are aware of this request.

The case is considered particularly disturbing, since it is suspected that among stolen data there may be information for members of the Federal Intelligence Service and the Federal Police Office (Fedpol), including officials operating inside and outside the country with false identities.

According to SRF sources, federal authorities assume potentially in the hands of criminals may have completed information on federal personnel.

Not known to whom the request for reward has been addressed

After the investigation was published, the PK Softech AG company and the Publica pension fund said they had not accepted any requests for compensation, Telegrafi broadcast.

However, Nicolas Mayencourt, head of the cyber security company Dreamlab Technology, which advises government institutions and companies for extortion cases, sees no reason to suspect their statements.

According to him, the most likely conclusion is that hackers have addressed the federal government for direct reward.

Another element that has attracted the expert’s attention is the fact that more than a month after the attack, there is still no indication that the data has been published.

It is unusual for this to last so long, Mayencourt has declared.

He sees three possibilities for the situation: The authors may have received the reward, sold the data, or negotiations may be continuing for tactical reasons.

Data could be completed in the hands of foreign intelligence services

According to Mayencourt, hacker groups like Akira carefully analyze the stolen data to determine the amount they might require in return but also to identify potential buyers.

Information that may reveal the identity or activity of intelligence officials is especially valid for foreign intelligence services, Telegrafi broadcast.

Criminal hackers are increasingly cooperating with state actors. It is possible that they sell stolen data to foreign states, including foreign intelligence services, Mayencourt has warned.

He stresses that co-operation can also function in the opposite direction, as intelligence services can use criminals to disguise their attacks as common compensation requirements.

Federal Council has discussed the case confidentially

Neither the Federal Department of Defence nor other federal institutions have agreed to officially comment on the compensation request.

However, according to SRF research, cyberattack on Publica supplier was again discussed at the Federal Council several days ago, in a confidentially held meeting.

Federal Council spokeswoman Nicole Lamon has confirmed the discussion, stating: Federal Council discussed Publica last Wednesday. He will not provide any further information on this matter.

Experts warn against payment reward

Cyber security expert Nicolas Mayencourt hopes the Swiss authorities do not pay compensation for stolen data.

He recalls that state institutions have made such payments in other cases. According to him, it is known that the state defence company Ruag has paid a reward last year to the Akira group, following an attack on its branch in the United States.

Mayencourt warns that any such payment directly finances the business model of criminal groups.

If it becomes known that Swiss authorities are paying, attackers are likely to intensify their efforts and seek further goals, the expert has warned./Telegraphy/