VADUZ — Liechtenstein's government has confirmed that a cyberattack on its register of beneficial owners of legal entities resulted in the theft of data relating to approximately 31,000 companies, foundations, and trusts. The breach, which occurred during the night of July 30, 2026, was detected the following day, prompting authorities to take the system offline and secure the data.
The register, established in 2021, is a cornerstone of the principality's efforts to combat money laundering and terrorist financing. It holds information on the individuals who ultimately own or control legal entities registered in Liechtenstein, a country of around 40,000 people nestled between Switzerland and Austria, where the financial sector plays a central role in the economy.
Government response and investigation
In a statement released on Sunday, the government said that an unnamed perpetrator gained unauthorized digital access to the system operated by the Federal Office for the Protection of the Constitution (VwbP). The breach was noticed on Thursday, and immediate measures were taken to secure the data and take the system offline. The government stressed that there were no indications that any data was altered or deleted.
A dedicated investigation team has already established that the hackers managed to steal data from approximately 31,000 legal entities. The government has also convened a crisis team, led by Prime Minister Brigitte Haas and Justice Minister Emanuel Schadler, which met on Saturday evening to coordinate the response and ensure that those affected are informed as soon as possible.
“We take this incident extremely seriously,” said Prime Minister Haas in a brief statement. “Our priority is to support the investigation, protect the integrity of our financial system, and communicate transparently with all those whose data may have been compromised.”
The breach raises concerns about the security of sensitive financial data in Europe, especially in jurisdictions that serve as hubs for wealth management. Liechtenstein, like its neighbor Switzerland, has long been a destination for international capital, and its register is a key tool for regulators to ensure that the country's financial center is not used for illicit purposes.
This incident is the latest in a series of cyberattacks targeting European institutions and companies. Earlier this year, two men were sentenced to prison for a major cyberattack on London's transport network, highlighting the growing threat posed by cybercriminals to critical infrastructure and data systems across the continent.
Experts note that the theft of beneficial ownership data could have significant implications for the individuals and entities involved, potentially exposing them to financial fraud, identity theft, or other malicious activities. The government has advised those affected to monitor their financial accounts and be vigilant against suspicious communications.
Liechtenstein's financial industry is a major employer and contributor to the national economy, and the government has pledged to strengthen its cybersecurity measures to prevent future breaches. The investigation is ongoing, and authorities are working with international partners to identify the perpetrators.
As Europe grapples with the dual challenges of digital transformation and security, this attack serves as a stark reminder of the vulnerabilities inherent in even the most regulated sectors. The European Union has been pushing for greater transparency and data protection, but incidents like this underscore the need for robust cybersecurity frameworks across all member states and associated territories.
The government has promised to keep the public informed as the investigation progresses, and to provide support to those whose data was compromised. For now, the full extent of the damage remains unclear, but the breach has already sent shockwaves through the financial community in Vaduz and beyond.
