Swiss government data compromised in ransomware attack on health foundation Radix
Learn More
The Swiss health promotion foundation Radix, based in Zurich, is reporting a ransomware attack that has exposed sensitive data belonging to multiple Swiss federal government offices.
Radix operates as a non-profit organization dedicated to health promotion through competence centers that carry out projects and services commissioned by the Swiss federal government, cantonal and municipal authorities, and other public and private organizations. The organization provides health education programs and operates online counseling services, including the SafeZone and StopSmoking platforms on behalf of Switzerland's public health authority.
The stolen data was leaked on the dark web on June 29, 2025.
The attack occurred on June 16, 2025. and was claimed by the Sarcoma ransomware group. The cybercriminals demanded a ransom payment within one week. When their extortion efforts failed, Sarcoma leaked the 1.3TB stolen data archive on their dark web leak portal. Exposed data includes:
- Document scans
- Financial records
- Contracts and agreements
- Internal communications
- Various administrative documents related to federal government projects
The number of affected individuals has not been disclosed.
The Swiss National Cyber Security Centre (NCSC) confirmed that investigations are currently underway to determine the specific government units and data affected by the attack. NCSC reports that the attackers did not gain direct access to Federal Administration systems.
Radix has assured stakeholders that it can restore its data from backup systems and noted that there is currently no evidence indicating that sensitive data from partner organizations was directly compromised.
As a precautionary measure, Radix has advised potentially exposed individuals to remain vigilant in the coming months and be cautious of attempts to obtain their passwords, credit card numbers, and account credentials.
