Swiss wealth managers urge delay to ownership register after hack

Switzerland’s Transparency Register is supposed to go live on October 1, 2026, cataloging the beneficial owners behind roughly 600,000 legal entities. But a cyberattack on neighboring Liechtenstein’s nearly identical system has Swiss wealth managers asking a reasonable question: maybe let’s not rush this.

Hackers breached Liechtenstein’s Register of Beneficial Owners, known as the VwbP, during the night of July 29-30, extracting personal data tied to approximately 31,000 legal entities. The compromised information included names, birth dates, nationalities, and countries of residence of the people behind companies, foundations, and trusts. No financial data was accessed.

What happened in Liechtenstein

Liechtenstein launched its VwbP in 2021 to comply with EU anti-money laundering directives. That streak ended on July 30 when authorities detected irregularities in the register. The Liechtenstein government moved quickly, taking the database offline and standing up a crisis unit led by Prime Minister Brigitte Haas and Justice Minister Emanuel Schädler. By July 31 or August 1, officials had been formally notified. Public statements confirming the scope of the breach followed between August 2 and 4.

Why Swiss wealth managers are nervous

Switzerland and Liechtenstein are deeply intertwined when it comes to wealth management. Many Swiss clients use Liechtenstein-domiciled entities, particularly foundations and trusts, as part of their wealth structuring. The breach doesn’t just affect people in Vaduz. It ripples across the border into Zurich, Geneva, and every private banking office in between.

Switzerland’s own Transparency Register would function along similar lines to Liechtenstein’s VwbP, collecting beneficial ownership data on the country’s legal entities. The scale is significantly larger, covering an estimated 600,000 entities compared to Liechtenstein’s 31,000. That’s roughly 20 times the attack surface, a detail that Swiss financial intermediaries are now emphasizing with considerable urgency.

The argument from wealth managers isn’t that transparency is bad. It’s that launching a massive centralized database of sensitive personal information without ironclad cybersecurity is reckless. The Liechtenstein breach is, in their view, a proof of concept for exactly the kind of attack that could target Switzerland’s register on a far greater scale.

The transparency vs. security tension

Beneficial ownership registers exist because of a straightforward policy goal: make it harder to launder money by forcing disclosure of who actually controls corporate entities. Liechtenstein, while not an EU member, adopted the framework through its European Economic Area membership.

The stolen Liechtenstein data, while not containing account balances or transaction histories, is far from harmless. Names and birth dates of beneficial owners, combined with their nationalities and residence countries, provide enough information for sophisticated social engineering attacks, identity theft, or even physical security threats against wealthy individuals.

Disclosure: This article was edited by Editorial Team. For more information on how we create and review content, see our Editorial Policy.