On February 27, 2025, an unknown perpetrator gained unauthorized access to the email account of Ruedi Eberle, the treasurer of Appenzell Innerrhoden, a canton in Switzerland. Despite this breach, the cantonal administration’s security system quickly intervened, preventing the spread of the attack to other systems or accounts. At present, there is no indication that data has been lost, and no other accounts within the cantonal administration have been affected.
The incident was detected when messages were sent from the compromised account to third parties. The security measures in place at the cantonal administration allowed the attack to be contained swiftly, ensuring minimal disruption.
While the breach involved a single email account, the administration moved quickly to mitigate any potential harm.
Following the breach, the Office of Information Technology took immediate action, implementing necessary security measures and initiating an analysis of the incident. This proactive approach helped to prevent any further damage.
The canton’s authorities have since kept employees and affected third-party contacts well-informed, ensuring transparency throughout the investigation.
As of now, the cantonal administration is confident that no further accounts were compromised, and the breach remains isolated to one individual’s email. The investigation is ongoing, with the relevant security teams focused on identifying the method used by the attackers to bypass the existing security protocols. The administration’s swift response highlights the importance of robust cybersecurity systems in protecting sensitive governmental operations.
Reference: