Swiss government SharePoint breach compromised 200 accounts

Hackers successfully breached the Microsoft SharePoint infrastructure of Switzerland's Federal Office for Information Technology and Telecommunication (BIT), compromising approximately 200 user accounts. Security specialists detected unusual activity on July 28, leading to the isolation of external network access to the servers.

The incident appears linked to vulnerabilities addressed during the July 2026 Patch Tuesday cycle, specifically potentially involving CVE-2026-56164 or CVE-2026-50522. While BIT has reset affected credentials and is reinstalling the servers with support from Microsoft and national cyber security authorities, no group has yet claimed responsibility for the intrusion.