Switzerland keeps October 1 transparency register launch despite hack fears

Summary

• Launch remains on track: Switzerland will proceed with the launch of its central beneficial-ownership transparency register on October 1, 2026, despite calls from wealth managers to delay the system following a cyberattack in neighbouring Liechtenstein.
• Liechtenstein breach: Hackers accessed and copied information relating to approximately 31,000 legal entities from Liechtenstein’s Register of Beneficial Owners during the night of July 29–30.
• Cybersecurity concerns: Swiss wealth managers have warned that centralising sensitive beneficial-ownership information could create an attractive target for cybercriminals and have called for stronger safeguards or a delay to the rollout.

GENEVA, August 31, 2026 — Switzerland will proceed with plans to launch its central corporate transparency register on October 1, despite calls from parts of the wealth-management industry to reconsider the rollout after a major cyberattack on a comparable registry in neighbouring Liechtenstein.

The Swiss government said Monday that the new transparency regime would enter into force as scheduled. The decision follows warnings from the Swiss Association of Wealth Managers that concentrating sensitive information about beneficial owners in a central database could create an attractive target for cybercriminals.

The concern was triggered by a cyberattack on Liechtenstein’s Register of Beneficial Owners (VwbP) during the night of July 29–30. According to Liechtenstein’s government, unknown attackers gained unauthorised access and copied data relating to around 31,000 legal entities. The affected entities included companies, foundations and trusts.

Liechtenstein authorities said the compromised information included the names of legal entities and details of their beneficial owners, including names, dates of birth, nationalities and countries of residence. There was no indication that the information had been modified or deleted. The government also said the register did not contain financial information such as assets, revenues or dividends.

Switzerland presses ahead with new register

Switzerland’s new system is being introduced under the Federal Act on Transparency of Legal Entities and the Identification of Beneficial Owners (LETA). The Federal Council decided in June that the legislation would enter into force on October 1, alongside related changes to Switzerland’s anti-money-laundering framework.

The legislation establishes a centralised federal register of beneficial owners. Its stated purpose is to provide relevant authorities with rapid access to reliable information about the individuals who ultimately own or control legal entities, strengthening efforts to prevent and prosecute money laundering and other financial crime.

The register will not be a public database. Access will be limited to authorised authorities and other entities permitted under the legislation, including relevant financial intermediaries carrying out their statutory anti-money-laundering obligations.

The Swiss government said the Liechtenstein incident reinforced the importance of the security measures being developed for the new system rather than providing a reason to abandon the October launch. The authorities have emphasised that cybersecurity and data protection are central elements of the implementation.

Wealth managers warn of concentration risk

The Swiss Association of Wealth Managers has taken a different view.

In a letter to Switzerland’s justice ministry dated August 24, the group urged authorities to pause the October rollout or introduce stronger restrictions on access to the database. It argued that a central repository containing sensitive ownership information could become a particularly attractive target for cybercriminals.

The concern is not limited to the possibility of financial information being stolen. Beneficial-ownership records can connect individuals with companies, foundations and other structures, potentially exposing relationships that could be used for targeted fraud, extortion or other forms of criminal activity.

The Swiss Bankers Association has also raised concerns about cybersecurity and data protection, arguing that transparency registers contain highly sensitive information and therefore require particularly strong safeguards.

The Liechtenstein warning

The incident in Liechtenstein has given those concerns a concrete example.

The country’s government said investigators determined that the attackers gained access to the VwbP and extracted copies of data relating to around 31,000 legal entities. The affected system was taken offline after the breach was detected, while authorities launched forensic investigations and a broader review of other systems containing sensitive information.

Liechtenstein authorities subsequently said there was no evidence that the attackers had modified or deleted information. They also said the compromised register did not contain bank-account information or other financial data such as assets, revenue or dividends.

The attack nevertheless raised concerns about the security of centralised ownership databases, particularly in financial centres where companies, trusts and foundations can involve wealthy individuals and cross-border structures.

Transparency versus financial-centre risks

Switzerland is introducing the register as part of a broader effort to strengthen its anti-money-laundering framework and improve the identification of the individuals who ultimately control legal entities.

The government argues that a centralised register will make it easier for authorities to obtain reliable beneficial-ownership information and strengthen the country’s ability to detect and prosecute financial crime.

For the financial industry, however, the policy creates a difficult balance between greater transparency and the protection of highly sensitive personal information.

Switzerland has spent years adapting its financial regulations to international anti-money-laundering standards. A delay could create questions about the country’s commitment to those reforms, while a security failure could damage confidence in Switzerland as a major international wealth-management centre.

The Federal Council has therefore opted to maintain the October 1 timetable while addressing cybersecurity concerns through the implementation of the new system.

Why this matters

• Financial-sector transparency: The new register is designed to give authorised authorities faster access to information on the individuals who ultimately own or control Swiss legal entities.
• Cybersecurity risk: The Liechtenstein breach demonstrates the potential consequences of compromising a central beneficial-ownership database containing sensitive personal information.
• Private-banking concerns: Swiss wealth managers and banks fear that concentrated ownership data could become an attractive target for cybercriminals and create reputational risks for the country’s financial centre.
• AML compliance: Switzerland is proceeding with the register as part of broader measures designed to strengthen its anti-money-laundering and financial-crime framework.

FAQs

Q1: When will Switzerland’s transparency register launch?

The new Swiss transparency regime is scheduled to enter into force on October 1, 2026. The Federal Council confirmed the date in June when it approved the entry into force of the new transparency legislation and related anti-money-laundering measures.

Q2: Will the Swiss beneficial-ownership register be publicly accessible?

No. The register is not intended to be a publicly accessible database. Access will be provided to authorised authorities and other entities covered by the legislation, including relevant financial intermediaries performing statutory anti-money-laundering duties.

Q3: What happened in the Liechtenstein cyberattack?

Unknown attackers gained unauthorised access to Liechtenstein’s Register of Beneficial Owners during the night of July 29–30 and copied data relating to around 31,000 legal entities. The compromised information included beneficial-owner details such as names, dates of birth, nationalities and countries of residence.

Q4: Was financial information stolen from Liechtenstein’s register?

According to Liechtenstein authorities, the compromised register did not contain financial information such as assets, revenues or dividends. There was also no indication that the data had been modified or deleted.

Q5: Why are Swiss wealth managers opposing the rollout?

Industry representatives are concerned that concentrating sensitive beneficial-ownership information in one central system could make it an attractive target for cybercriminals. They have called for a delay or stronger restrictions and safeguards following the Liechtenstein breach.