为瑞士联邦政府雇员提供养老金的养老基金Publica今日确认，其一家外部软件供应商遭受网络攻击，导致数据泄露。
Publica, the pension fund that provides pensions for staff of the Swiss federal government, has confirmed today that a data leak occurred as a result of a cyberattack on one of its external software suppliers.
瑞士政府表示，该供应商于9月底发现此次攻击，随后向联邦当局、Publica及其其他客户报案，并提交了刑事申诉。因此，总检察长办公室已启动调查。
The Swiss government stated that the supplier discovered the attack at the end of September and then filed a criminal complaint while informing the federal authorities, Publica, and its other customers. Consequently, the Office of the Attorney General has launched an investigation.
目前尚不清楚具体哪些数据被窃取，但该供应商正与多个联邦机构合作，以确定Publica有多少数据受到影响。
Until now, it has not yet been made clear what data was taken, but the supplier is currently working with several federal authorities to determine how much Publica data was affected.
其发布的声明中并未提及可能受影响的会员人数，也未说明调查何时会完成。
The statement they gave provided no information on how many members might be affected or when the investigation would be completed.
Publica尚未公布该供应商的身份，也未说明泄露的数据类型，但已通知其会员此次安全事件、可能带来的影响以及已采取的应对措施。声明明确指出，没有其他联邦机构与该供应商开展业务合作。
Publica has not identified the supplier or specified the type of data that was leaked, but it has informed its members of the breach, its possible implications for them, and the measures taken in response. As the statement makes clear, no other federal agencies carry on any business with the supplier.
Publica是瑞士最大的养老基金之一，为联邦政府雇员以及ETH领域（由多所联邦大学和科研机构组成）的工作人员提供养老金保障。
Publica is one of the largest pension funds in Switzerland and provides pension coverage for individuals who work for the federal government and for those in the ETH Domain, which consists of a number of federal universities and research organisations.
据Swissinfo报道，截至2025年底，该基金拥有约7万名活跃会员和4.16万名养老金领取者，资产总额接近450亿瑞士法郎。
Swissinfo stated that by the end of 2025, the fund had around 70,000 active members and 41,600 pensioners, with assets just under 45 billion Swiss francs.
此前，瑞士联邦数据也曾通过供应商泄露。2023年，Play勒索软件团伙公布了从Xplain公司窃取的文件。Xplain是一家为多个联邦机构（包括军队和海关部门）提供服务的IT公司。该团伙共发布了约907GB的数据。
Swiss federal data has already been made public via a supplier. In 2023, the Play ransomware group released files which it had stolen from Xplain, an IT company that provided services to several federal agencies, including the army and the customs service. The group published approximately 907GB of data.
同年，软件公司Concevis也遭遇了勒索软件攻击。其客户包括联邦统计局和联邦税务局，据SRF报道，联邦政府的老数据再次被盗。
The same year, the software company Concevis was also the victim of a ransomware attack. It had among its customers the Federal Statistical Office and the Federal Tax Administration, and once again older federal data was stolen, SRF reported.
外部公司也是近期美国联邦调查局（FBI）和丹麦CPR系统发生数据泄露的渠道。
External companies were also the means by which recent breaches occurred at the FBI and Denmark’s CPR.