UBS reports a data leak after a cyber attack on a provider

TruthLens AI Suggested Headline:

"UBS and Pictet Confirm Data Leak Following Cyber Attack on Service Provider"

UBS reports a data leak after a cyber attack on a provider analysis cover image

CNN 8.7

Image Source: https://media.cnn.com/api/v1/images/stellar/prod/gettyimages-1248855120.jpg?c=16x9&q=w_800,c_fill

Original Article Source: https://edition.cnn.com/2025/06/18/business/ubs-data-leak-cyber-attack-intl

View Raw Article Source (External Link)

Raw Article Publish Date: 18 June 2025

AI Analysis Average Score: 8.7

These scores (0-10 scale) are generated by Truthlens AI's analysis, assessing the article's objectivity, accuracy, and transparency. Higher scores indicate better alignment with journalistic standards. Hover over chart points for metric details.

TruthLens AI Summary

Swiss banks UBS and Pictet have reported a data leak resulting from a cyber attack on Chain IQ, a service provider based in Baar, Switzerland. While the breach did not compromise client information, it was reported that data belonging to thousands of UBS employees was affected. The Swiss newspaper Le Temps revealed that files containing sensitive details about tens of thousands of UBS staff were stolen in the incident. UBS confirmed that the attack targeted an external supplier and stated that no client data was compromised. The bank emphasized its swift response to the incident, ensuring that operations remained unaffected despite the breach. However, the leaked information reportedly included direct contact details for UBS CEO Sergio Ermotti, raising concerns about the sensitivity of the data exposed in the attack.

Chain IQ acknowledged that it, along with 19 other companies, was targeted in the cyber attack, which resulted in the leaked data being published on the dark web. The company issued a statement indicating that countermeasures were implemented promptly to contain the situation. They also noted that the leak occurred on June 12 but refrained from commenting on any potential ransom demands or interactions with the attackers, citing security and investigative reasons. Meanwhile, Pictet, another affected bank, clarified that the stolen information was limited to invoice data related to some of its suppliers, including technology providers and consultants, and did not include client data. Pictet underscored the seriousness with which it treats data breaches and highlighted its existing protocols and agreements designed to prevent unauthorized access to sensitive information.

TruthLens AI Analysis

You need to be a member to generate the AI analysis for this article.

Not a member yet? Register for free.

Unanalyzed Article Content

Source URL: https://edition.cnn.com/2025/06/18/business/ubs-data-leak-cyber-attack-intl

Swiss banks UBS and Pictet said Wednesday that they had suffered a data leak due to a cyber attack on a provider in Switzerland, which did not compromise client information, although a report said thousands of UBS workers’ data was affected.

Swiss newspaper Le Temps said files containing details of tens of thousands of UBS (UBS) employees were stolen from the Baar-based business service company Chain IQ, whose website lists KPMG and Mizuho among its clients.

“A cyber attack at an external supplier has led to information about UBS and several other companies being stolen. No client data has been affected,” UBS said.

“As soon as UBS became aware of the incident, it took swift and decisive action to avoid any impact on its operations.”

The leaked cache also included the number of a direct internal line to UBS CEO Sergio Ermotti, Le Temps reported.

Chain IQ said it and 19 other companies were targeted in the attack, resulting in leaked data being published online on the dark net – a part of the internet not accessible through standard search engines.

Steps and countermeasures were promptly taken and the situation was contained, it said in a statement.

Chain IQ, which said the data was published on the afternoon of June 12, said that it could not provide any information on potential ransom demands or interactions with the attackers, for security and investigative reasons.

Private bank Pictet said the information stolen in the incident did not contain its client data and was limited to invoice information with some of the bank’s suppliers, such as technology providers and external consultants.

Pictet said it took data breaches seriously and had protocols and agreements in place to stop unauthorized access.

Back to Home

Source: CNN