Hackers steal 31,000 records from Liechtenstein's beneficial-ownership register

The breach

In the night of 30 July 2026, unknown attackers gained unauthorized digital access to Liechtenstein's "Verzeichnis wirtschaftlich berechtigter Personen" (VwbP), the national register of beneficial owners. The breach was discovered on Thursday when staff at the Office of Justice noticed irregularities. The Office of Information Technology was called in and took the affected system offline. By Friday, the government had been formally notified, and on Saturday evening a crisis team was convened. The government disclosed the incident at a hastily arranged press conference in Vaduz on Sunday, 2 August.

The register

The VwbP was introduced in 2021 to implement the EU's anti-money-laundering directive. It holds the names and details of the individuals who ultimately own or control companies, foundations, and trusts registered in the principality. The register is a compliance tool designed to prevent money laundering, predicate offences to money laundering, and terrorist financing. The attack compromised data copies of roughly 31,000 legal entities, a figure that approaches the entire adult population of the country of 41,000 inhabitants.

Government response

Prime Minister Brigitte Haas and Justice Minister Emanuel Schädler are leading the crisis team. At the press conference, Haas stated that there is no evidence data was altered or deleted. She also addressed the question of extortion.

No ransom demands have been received so far, and the data has not appeared on the darknet.

A central information point has been set up for affected persons, and the government pledged to proactively inform all those whose data was compromised. The VwbP remains offline pending the investigation.

A financial hub under scrutiny

Liechtenstein, nestled between Switzerland and Austria, is one of the world's richest countries per capita, with financial and banking services forming a cornerstone of its economy. For decades, Europeans used its foundations and accounts to hide assets from tax authorities. Bank secrecy in tax matters was lifted only in 2017. The breach of a register explicitly built to shed light on opaque corporate structures is therefore particularly sensitive, turning a transparency instrument into a data-protection liability.

What happens next

The crisis team is expected to provide further updates on Monday. The identity of the attackers remains unknown, and the investigation is ongoing. The incident raises questions about the cybersecurity of government-held beneficial-ownership registries across Europe, as more countries adopt similar tools under EU rules.