The government of Liechtenstein has confirmed that hackers stole records identifying the people behind roughly 31,000 companies, foundations, and trusts registered in the country. Officials disclosed the incident over the weekend and have formed a crisis unit to manage the response.
According to the government, unknown attackers gained unauthorized access to the Register of Beneficial Owners for two days beginning on July 29. The register is housed within the Office of Justice, which first detected the intrusion and quickly took the affected systems offline to contain it.
The register was created in 2021 to comply with European Union anti-money laundering and financial transparency rules. It contains information identifying the natural persons who ultimately own or control legal entities registered in Liechtenstein.
An initial investigation determined that data tied to 31,000 entities was exfiltrated during the breach window. Authorities said there is currently no evidence that any information in the register was altered or deleted.
The breach carries outsized significance given Liechtenstein’s role in global finance. Despite a population of only about 40,000, the principality is a major wealth management hub, serving clients from around the world. A compromised beneficial ownership registry could expose sensitive ownership structures used by individuals and entities seeking privacy in their financial affairs.
Prime Minister Brigitte Haas and Minister of Justice Emanuel Schädler are jointly leading the crisis team formed to address the incident, though the government has not yet named a suspected culprit or motive.
Part of a Broader Pattern
Attacks on government registries containing sensitive personal and financial data are increasingly common, offering both cybercriminals and state-linked actors access to large troves of information in a single intrusion. The Record notes that France has suffered three separate incidents over the past year affecting its Education Ministry, the agency responsible for issuing identity documents, and a national database of bank account records.
Security professionals should note that beneficial ownership registries, created across the EU to improve financial transparency, represent concentrated, high-value targets. Organizations and individuals with entities registered in Liechtenstein should watch for follow-on phishing or social engineering attempts that could leverage the exposed ownership data.