Liechtenstein Government Registers Compromised in Cyberattack, 31,000 Records Stolen
A cyberattack on Liechtenstein's Register of Beneficial Owners has resulted in the exfiltration of over 31,000 records, prompting the government to form a crisis unit.
Liechtenstein's government has established a crisis unit to manage the fallout from a significant cyberattack that compromised tens of thousands of records related to companies, foundations, and trusts within the nation. The breach, which occurred over a two-day period beginning July 29, saw unknown attackers gain unauthorized access to the country's Register of Beneficial Owners.
The Register of Beneficial Owners, a crucial database containing information on the ultimate owners of legal entities, was established in 2021 to comply with European Union directives aimed at combating money laundering and enhancing financial transparency. The Office of Justice, responsible for maintaining the registry, detected the intrusion and promptly took the affected systems offline to prevent further compromise.
An initial investigation confirmed that data pertaining to approximately 31,000 entities was successfully exfiltrated by the attackers. Importantly, authorities have stated there is currently no evidence to suggest that any of the stolen data was modified or deleted, limiting the immediate impact to data exposure.
Despite its small size, Liechtenstein is a globally recognized financial services powerhouse and a significant wealth management hub, attracting clients from around the world. The compromise of its beneficial ownership registry raises concerns about the security of sensitive financial and corporate information held within the jurisdiction.
In response to the incident, a dedicated crisis team has been assembled, co-led by Prime Minister Brigitte Haas and Minister of Justice Emanuel Schädler. This team is tasked with overseeing the investigation, assessing the full scope of the breach, and coordinating the government's response to mitigate the damage and prevent future occurrences.
Cyberattacks targeting government registries are a persistent threat, often providing malicious actors with access to extensive databases of sensitive personal and corporate information. Recent incidents in France, where data from the Education Ministry, identity document agency, and a national bank registry were compromised, underscore the vulnerability of such critical infrastructure.
The Liechtenstein government is continuing its investigation into the exact methods used by the attackers and the full extent of the compromised data. Further updates are expected as the investigation progresses, with a focus on reinforcing security measures for sensitive government databases.
The cyberattack on Liechtenstein's Register of Beneficial Owners, which occurred overnight between Wednesday and Thursday last week, was detected on Thursday. The government has confirmed that while the system was taken offline and measures were implemented to secure data, there are currently no indications that any of the accessed information was altered or deleted. A crisis unit was established over the weekend to thoroughly investigate the incident and its specific vector.