{"id":"liechtenstein-beneficial-owner-register-breach-aug-2026","category":"breach","status":"closed","title":"Liechtenstein beneficial ownership register breached; data on about 31,000 entities copied","tldr":"Liechtenstein's beneficial owner register was hacked on 30 July 2026 and data on about 31,000 companies, foundations and trusts was copied. It holds owners' names, birth dates, nationalities and residence. Register reopened in limited form 5 Oct; no sign of publication.","summary":"An unknown attacker broke into Liechtenstein's Register of Beneficial Owners of Legal Entities (VwbP) in the night of 30 July 2026 and copied data on about 31,000 companies, foundations and trusts. The government says the register holds each entity's name and its beneficial owners' surname, first name, date of birth, nationality and country of residence. It holds no addresses, phone numbers or financial details such as assets. The government described a targeted, technically sophisticated attack that hit the register only, and says no other state servers showed unlawful access. It filed a criminal complaint against persons unknown, and prosecutors are working with European authorities. Because the register has no contact details, the government notified the legal entities and asked them to tell the people involved. The register reopened in a limited form on 5 October, with in-person identification in Vaduz, after the vulnerabilities found were fixed. Backups show the data was not altered. As of 2 October there were no signs the stolen data had been published, no perpetrator had been named, and the investigation and an independent external review were still under way.","action":"If you are listed as an owner of a Liechtenstein company, foundation or trust, expect a notice from the entity and treat unexpected emails, calls or messages that quote your name, birth date or ownership with suspicion. Confirm any request through a contact you already know before acting. Ask your trustee or adviser if unsure.","product":"Liechtenstein Register of Beneficial Owners (VwbP)","audience":"both","severity":"high","patch":"na","exploited":false,"cves":[],"tags":["data-breach","liechtenstein","beneficial-ownership","government","trusts","foundations","gdpr","privacy"],"affected":[],"fixed":[],"matches":[],"sources":[{"kind":"advisory","title":"Cyberattack on the Register of Beneficial Owners (VwbP): initial statement","url":"https://regierung.li/medienportal-medium/16182/234653/medienmitteilung","by":"Government of Liechtenstein","date":"2026-08-02"},{"kind":"advisory","title":"Cyberattack on the VwbP: update of 4 August","url":"https://www.regierung.li/medienportal-medium/16444/234675/medienmitteilung","by":"Government of Liechtenstein","date":"2026-08-04"},{"kind":"advisory","title":"Following the cyberattack: additional external IT review","url":"https://www.presseportal.ch/de/pm/100000148/100941875","by":"Government of Liechtenstein","date":"2026-08-31"},{"kind":"advisory","title":"Following the cyberattack: limited resumption of VwbP","url":"https://www.regierung.li/medienportal-medium/16444/234948/0/medienmitteilung","by":"Government of Liechtenstein","date":"2026-10-02"},{"kind":"news","title":"31,000 copies of data belonging to legal entities stolen in Liechtenstein","url":"https://www.swissinfo.ch/eng/foreign-affairs/31000-copies-of-data-belonging-to-legal-entities-stolen-in-liechtenstein/91838585","by":"Swissinfo","date":"2026-08-03"}],"started":"2026-08-02","closed":"2026-10-02","created":"2026-11-03T21:20:22.261Z","updated":"2026-11-03T21:20:22.261Z","cve_notes":[],"timeline":[{"at":"2026-10-02","added":"2026-11-03T21:19:18.455Z","kind":"all-clear","text":"The government said the register would reopen in limited form on 5 October, with in-person identification in Vaduz, after the vulnerabilities found were fixed. Backups showed the data was not altered. Investigations continue, there are no signs the stolen data has been published, and an independent external review is still being procured.","url":"https://www.regierung.li/medienportal-medium/16444/234948/0/medienmitteilung","by":"Government of Liechtenstein","patch":"na"},{"at":"2026-08-31","added":"2026-11-03T21:19:18.455Z","kind":"other","text":"The government said it would bring in an international firm for an additional review of the incident and a wider audit of systems holding sensitive data. It said there were still no indications the data had been misused, and that systems taken offline were being restored after checks.","url":"https://www.presseportal.ch/de/pm/100000148/100941875","by":"Government of Liechtenstein","patch":null},{"at":"2026-08-04","added":"2026-11-03T21:19:18.455Z","kind":"other","text":"The government said forensic work had found a possible entry point and described a targeted, technically sophisticated attack on the register alone. It listed the data held (names, dates of birth, nationalities, countries of residence), said a criminal complaint against persons unknown had been filed, and began notifying the legal entities so they could inform the people involved. Other systems holding sensitive data were taken offline for checks.","url":"https://www.regierung.li/medienportal-medium/16444/234675/medienmitteilung","by":"Government of Liechtenstein","patch":null},{"at":"2026-08-03","added":"2026-11-03T21:19:18.455Z","kind":"other","text":"Prime Minister Brigitte Haas told Swiss broadcaster SRF that no ransom demand had been received and the data had not appeared on the dark web, according to Swissinfo.","url":"https://www.swissinfo.ch/eng/foreign-affairs/31000-copies-of-data-belonging-to-legal-entities-stolen-in-liechtenstein/91838585","by":"Swissinfo","patch":null},{"at":"2026-08-02","added":"2026-11-03T21:19:18.455Z","kind":"disclosed","text":"The government announced that an unknown party had gained unauthorised access and copied data on about 31,000 legal entities. The system was taken offline, a crisis unit was set up and the incident was treated as a personal data breach under GDPR. There was no evidence data was altered or deleted.","url":"https://regierung.li/medienportal-medium/16182/234653/medienmitteilung","by":"Government of Liechtenstein","patch":"na"},{"at":"2026-07-30","added":"2026-11-03T21:19:18.455Z","kind":"other","text":"Liechtenstein's Office of Justice noticed irregularities in the Register of Beneficial Owners (VwbP) and called in the Office of Informatics. The government places the attack in the night of 30 July.","url":"https://regierung.li/medienportal-medium/16182/234653/medienmitteilung","by":"Government of Liechtenstein","patch":null}],"url":"https://hard.fyi/live/liechtenstein-beneficial-owner-register-breach-aug-2026/","json":"https://hard.fyi/api/live?id=liechtenstein-beneficial-owner-register-breach-aug-2026"}