Digitization has brought countless conveniences to our lives. Digital payment systems, online banking, search engines, and cloud computing are just a few of the many noteworthy possibilities. Both businesses and individuals are transitioning to digital infrastructure. In Switzerland today, hardly any company has fully analog operations. Nevertheless, it must be acknowledged that the omnipresence of digital offerings provides a breeding ground for cybercriminals. Increasingly, we hear about companies falling victim to cybercrime. But how prevalent is cybercrime in Switzerland?
The National Cyber Security Centre (NCSC), Switzerland’s federal competence center for cybersecurity, will be integrated into the Federal Department of Defence, Civil Protection, and Sport (VBS) as of January 1, 2024. The NCSC has been operational since July 2020 and regularly collects data on cybercrime. These data show a significant increase in cyberattacks between 2020 (over 10,000 incidents) and 2022 (over 34,000 incidents). By the end of April 2023, the NCSC had already received over 10,000 reports of cyber incidents, suggesting a high likelihood of surpassing last year's number. It's important to note, however, that these figures include not only cyber incidents with actual damage but also thwarted attacks. Looking at other industrialized nations, the extent of the problem of cyberattacks becomes apparent. Small and medium-sized enterprises (SMEs) are highly popular targets for cybercriminals, since attacking an SME can yield more money than targeting individuals. Successful attacks using methods like brute force, phishing, and social engineering can generate substantial profits for the perpetrators. SMEs are also attractive targets for ransomware attacks: they often store sensitive information from numerous customers, whereas individuals usually only possess sensitive information about themselves. To avoid reputational damage, SMEs might be more inclined to pay ransom demands. Why don't cybercriminals target large enterprises? There are several reasons. Large companies often have cybersecurity departments equipped with comprehensive expertise, resources, and infrastructure. Additionally, employees at all levels in larger companies are frequently sensitized to cybersecurity issues. Many companies even have security and emergency protocols and cyber compliance guidelines that need to be followed in daily operations and emergencies. Consequently, attacks on large enterprises are much less likely to succeed than those against SMEs.
In conclusion, cyberattacks are unfortunately becoming a daily business matter for both individuals and SMEs. The number of such attacks continues to rise year after year, with no sign of abating. SMEs are particularly lucrative targets for cybercriminals, though even large enterprises are regularly affected. At Teichmann International (IT Solutions) AG, we are always available to advise you on both risks and prevention strategies. In the event of a cyber incident, we are also here to support you at any time, without compromise.