After hacker attack in Liechtenstein: How secure are sensitive financial data with the federal government?

A recent hacker attack in Liechtenstein, which compromised approximately 31,000 records from the registry of economic beneficiaries, has cast a shadow over the principality's financial sector and raised critical questions about data security. The breach occurred about a week before the report, with the perpetrators and their motives remaining unclear as law enforcement agencies investigate.

Experts in anti-money laundering see a potential link between the attack and clients from Russia and other Eastern European countries who have utilized Liechtenstein's financial services since the 1990s. Knowledge of these individuals' financial vehicles could be valuable to hacker groups, particularly those with ties to Ukraine. The stolen data might also surface in the United States, which has been scrutinizing foundations established by wealthy Russians and managed by Liechtenstein fiduciaries, especially since Russia's invasion of Ukraine.

If the data leak exposes more problematic clients, it could increase pressure on Liechtenstein from the U.S. The principality already grappled with 475 "zombie foundations" last year, vehicles whose fiduciaries withdrew due to fears of sanctions. These foundations are largely inactive, either already sanctioned or at risk of being placed on a sanctions list. The government is actively seeking solutions to this issue.

Compounding these concerns, Switzerland is scheduled to launch its own transparency register in October, requiring companies to report beneficial ownership above a 25% stake. This development, mirroring Liechtenstein's system, inevitably brings the security of Switzerland's new database into question. The incident in Liechtenstein underscores the vulnerabilities inherent in such registries and the potential reputational and financial fallout.