Liechtenstein’s Register of Beneficial Owners was breached in a cyberattack that allowed hackers to copy data linked to roughly 31,000 legal entities, including companies, foundations and trusts.
Scope of the breach
- The intrusion occurred overnight on July 29–30.
- Attackers created a new user account, giving them several hours of access before the activity was detected.
- Data copied consisted of names, dates of birth and nationalities of beneficial owners.
- No financial information—such as bank account numbers, asset details, revenues or dividends—was stored in the register and therefore was not compromised.
- There is no evidence that the copied data was altered or deleted.
Government response
- The register was taken offline immediately after detection.
- A crisis task force, led by Prime Minister Brigitte Haas and Justice Minister Emanuel Schädler, was established to investigate.
- Fabian Schmid, head of Liechtenstein’s Office of Information Technology, confirmed the nature of the copied data.
- The identity of the attackers and their motive remain under investigation, and no timeline has been given for restoring the register.
Impact on the financial sector
- Simon Tribelhorn, director of the Liechtenstein Bankers Association, stated that no banks or customer banking data were affected.
- Authorities have not reported any unauthorized access to banking systems or other financial records.
Broader implications
The incident underscores the growing importance of robust cybersecurity for regulatory registers that support anti‑money‑laundering and corporate‑transparency frameworks. While the breach did not expose financial details, the exposure of personal identifying information for beneficial owners highlights the need for stronger safeguards around government‑held ownership data.
Source article: outboundinvestment.com
