Swiss Wealth Managers Seek Delay to Ownership Register After Liechtenstein Cyberattack

Swiss wealth managers are urging authorities to reconsider the Oct. 1 launch of Switzerland’s new beneficial ownership register after hackers breached a similar database in neighboring Liechtenstein and copied information linked to about 31,000 legal entities.

The pushback puts cybersecurity at the center of Switzerland’s effort to strengthen its anti-money laundering regime. The planned federal register will centralize information identifying the people who ultimately control Swiss legal entities and certain foreign entities connected to the country, giving authorities and other authorized users access to ownership information that is currently more fragmented.

The Swiss Association of Wealth Managers has called for the launch to be delayed, while the Swiss Bankers Association has raised security concerns and sought a formal assessment following the Liechtenstein breach, according to the Financial Times. The industry groups argue that concentrating sensitive ownership information in a central system creates an attractive target for cybercriminals.

Liechtenstein Hack Exposed Data on 31,000 Entities

The warnings follow a targeted cyberattack on Liechtenstein’s Register of Beneficial Owners, known as the VwbP.

Unknown attackers gained unauthorized access during the night of July 29-30 and copied data relating to roughly 31,000 legal entities, according to the Liechtenstein government’s official account of the cyberattack. The database contains information on the beneficial owners of companies and other legal entities.

Authorities said there was no indication that information had been modified or deleted. The government temporarily removed external access to the register and launched forensic investigations into how attackers circumvented its security protections.

The compromised information included personal identifying details associated with beneficial owners, although Liechtenstein officials said financial information such as assets, revenue and dividend data was not taken.

The government described the incident as a targeted, technically sophisticated attack. As a precaution, authorities temporarily took other sensitive systems offline for security checks, including tax-related platforms and the Central Register of Accounts, despite finding no evidence at the time that those systems had also been breached.

For Switzerland’s wealth-management industry, the episode provides a nearby example of the cybersecurity exposure created when sensitive ownership information is consolidated into government databases.

Switzerland Plans Oct. 1 Launch

Switzerland’s transparency register forms part of a broader overhaul of the country’s anti-money laundering framework.

The Federal Council decided in June that the revised Anti-Money Laundering Act and the new Act on the Transparency of Legal Persons and the Identification of Beneficial Owners will enter into force on Oct. 1. Parliament approved the legislation in September 2025.

Under the new system, legal entities must disclose the individuals who ultimately control them. The Federal Office of Justice will operate the centralized register, while a control unit within the Federal Department of Finance will be responsible for checking the accuracy, completeness and timeliness of the information.

The register is not intended to function as a publicly searchable database. Access will be restricted to relevant authorities and entities subject to Switzerland’s anti-money laundering legislation.

The Swiss government argues that the changes will close gaps in its anti-money laundering framework and allow authorities to identify more quickly who ultimately controls a company.

The Swiss Federal Council’s Anti-Money Laundering Implementation Announcement also links the implementation schedule to the Financial Action Task Force’s next evaluation of Switzerland, expected in 2027-2028.

That timetable creates a regulatory trade-off: delaying the system could give authorities additional time for cybersecurity reviews but could also complicate Switzerland’s efforts to demonstrate progress against financial-crime risks ahead of international scrutiny.

Pilot Program Was Designed to Test Infrastructure

Swiss authorities had already recognized the need for technical testing before full implementation.

The Federal Office of Justice launched a pilot program on June 16 to test the register’s technical infrastructure, digital processes and interfaces using real data. Participation was opened voluntarily to entities subject to reporting requirements as well as judicial and administrative authorities permitted to access the system.

The Liechtenstein breach occurred roughly six weeks after that Swiss pilot began.

That sequence changes the risk assessment for financial institutions because the debate is no longer centered solely on whether Switzerland can build a functional database. Wealth managers are now questioning whether a centralized ownership system can be sufficiently protected against attackers deliberately targeting sensitive information about wealthy individuals and corporate structures.

The concern is particularly relevant in Switzerland, where private banking, asset management, family offices and cross-border wealth structures represent a major component of the financial system.

PE NEWSWIRE has tracked how wealth-management channels are becoming increasingly important to alternative asset managers, including SEI and Carlyle’s partnership to broaden private-markets access for wealth and retirement investors. As private banks and wealth platforms distribute more private equity, private credit and other alternative products, the security and regulatory infrastructure surrounding beneficial owners becomes increasingly relevant to private-capital firms.

Beneficial Ownership Rules Affect Private Capital Structures

The issue also extends beyond traditional private banking.

Private equity and private credit investments commonly use holding companies, acquisition vehicles, partnerships and other legal structures across multiple jurisdictions. Beneficial ownership regimes determine what information about the individuals ultimately controlling those entities must be collected and disclosed to authorities.

For fund managers and institutional investors, stronger ownership transparency can improve anti-money laundering controls and counterparty due diligence. But centralized databases also concentrate information that may be sensitive from both commercial and personal-security perspectives.

That tension has become increasingly important as regulators globally seek greater visibility into opaque corporate structures.

Private-market firms already face expanding compliance obligations across fundraising, investor onboarding, sanctions screening and ownership verification. A significant breach involving beneficial-owner information can therefore create risks extending beyond government systems to financial intermediaries responsible for gathering and transmitting the underlying data.

PE NEWSWIRE has also examined the growing intersection between financial services and operational technology through Bain Capital’s investment in RQD Clearing amid expanding market infrastructure demand, reflecting the broader importance of resilient technology as financial activity becomes increasingly digitized.

Transparency and Cybersecurity Now Collide

Switzerland’s policy objective remains straightforward: authorities want reliable information identifying the individuals behind corporate entities so that legal structures cannot easily be used to conceal money laundering, terrorist financing or other illicit financial activity.

The Liechtenstein incident demonstrates the competing risk.

The more comprehensive and centralized an ownership database becomes, the more valuable it may be to attackers seeking information on wealthy individuals, corporate structures and cross-border holdings.

Restricting public access reduces that exposure but does not eliminate it. Liechtenstein’s experience shows that a system designed for controlled access can still become the target of a sophisticated cyberattack.

The immediate question for Switzerland is therefore whether the Liechtenstein breach warrants changing the Oct. 1 timetable or strengthening safeguards without postponing implementation.

For private banks, wealth managers and alternative investment firms, the outcome will have implications beyond regulatory compliance. Switzerland’s financial center has historically competed on institutional stability, confidentiality and security alongside investment expertise.

A beneficial ownership register is intended to strengthen one component of that reputation by improving financial transparency. The industry’s warning is that inadequate cybersecurity could damage another.

The Liechtenstein attack has made those two objectives — transparency and data protection — much harder for Swiss policymakers to consider separately.