HACKERS STEAL BENEFICIAL-OWNERSHIP DATA CONNECTED TO 31,000 LIECHTENSTEIN LEGAL ENTITIES

VADUZ, Liechtenstein — Unknown attackers gained unauthorized access to Liechtenstein’s Register of Beneficial Owners and stole data associated with approximately 31,000 companies, foundations, and trusteeships, triggering a government crisis response and the temporary shutdown of several public systems.

The intrusion occurred during the night leading into July 30, 2026, when attackers unlawfully accessed the digital register maintained by Liechtenstein’s Office of Justice.

Irregularities were detected during July 30, prompting the Office of Justice to contact the country’s Office of Information Technology. Authorities immediately implemented measures to secure the information, removed the affected system from the internet, and opened a comprehensive investigation.

The government was informed on July 31 that the attack may have succeeded. Preliminary findings delivered on August 1 confirmed that the attackers had accessed the register and extracted copies of data connected to approximately 31,000 legal entities.

The 31,000 figure refers to legal entities rather than a confirmed number of individual people or isolated records. Those entities include companies, foundations, and trusteeships. Each entity may have one or more beneficial owners recorded in the system, and the government has not disclosed the total number of individuals whose personal information was exposed.

Liechtenstein’s Register of Beneficial Owners, known by its German abbreviation VwbP, contains information identifying the natural persons who ultimately own, control, or benefit from legal entities registered in the country.

The register exists to help authorities detect concealed ownership structures and combat money laundering and terrorism financing. The law establishing the register took effect in 2021 and implemented requirements under the European Union’s Fifth Anti-Money Laundering Directive.

Authorities have confirmed that copies of registry data were taken. The government has found no evidence that information inside the system was changed or deleted.

The absence of identified alteration or deletion limits the incident’s known effect on the integrity of the register, but it does not reduce the seriousness of the confidentiality breach. Beneficial-ownership data can reveal connections between individuals and financial or corporate structures that may not otherwise be publicly apparent.

Liechtenstein’s government classified the incident as a breach of personal-data protection under Article 33 of the European Union’s General Data Protection Regulation. Officials are working to notify affected individuals under the requirements of Article 34.

The compromised register remains unavailable to external users through Liechtenstein’s government-services website while the investigation and security review continue.

Initial forensic findings indicate that the operation was a targeted attack against the beneficial-ownership register maintained by the Office of Justice. Authorities have not identified evidence that the attackers successfully compromised other government systems.

The government temporarily disconnected several additional systems as a precaution while specialists conducted broader security examinations.

Liechtenstein took its electronic value-added-tax portal and its electronic reporting and data-exchange platform, known as Lides, offline on July 31. Authorities also disconnected the Central Account Register and the Intax central tax system on August 3.

Government officials said those shutdowns were precautionary and that there was no indication of unauthorized access to the additional systems. Each system is undergoing expanded security testing before normal access is restored.

The government convened a crisis unit on the evening of August 1 and formally confirmed its operation on August 2.

Prime Minister Brigitte Haas and Justice Minister Emanuel Schädler are leading the crisis unit. Its responsibilities include establishing the full scope of the intrusion, coordinating forensic and security work, notifying affected parties, closing potential vulnerabilities, and implementing measures intended to prevent further unauthorized access.

The government has not identified the attackers, disclosed the method used to enter the registry, or attributed the operation to a criminal organization or foreign state. It has also not stated whether stolen credentials, an unpatched vulnerability, a compromised service provider, or another access method enabled the breach.

No public information establishes that ransomware was deployed. The confirmed incident involves unauthorized access and data theft rather than reported encryption or destruction of government information.

Liechtenstein is a small European principality located between Switzerland and Austria, with a population of approximately 40,000. Its financial-services sector has an international reach that extends far beyond the country’s geographic size, meaning the compromised registry may contain ownership information involving people and interests located outside Liechtenstein.

The government has not publicly disclosed whether information connected to foreign citizens or residents was among the stolen data. It has also not released the specific data fields taken, the total volume of copied files, or whether the attackers attempted to sell, publish, or otherwise use the information.

The investigation must now determine how the attackers entered the register, how long they maintained access, what information they viewed or copied, whether credentials or system configurations were exposed, and whether any of the stolen data has been distributed.

Liechtenstein’s response has moved beyond the originally affected register to a broader examination of connected public infrastructure. The confirmed theft remains limited to data associated with approximately 31,000 legal entities, while the identities of the attackers, the complete number of affected individuals, and the ultimate use of the stolen information remain unknown.

🔥 NOW AVAILABLE! 🔥

‎👉 Eclipsera – Apple Music

Sponsored • TRJ Ads
Inquiries: contact@therealistjuggernaut.com

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE