伯尔尼两家养老金基金供应商遭网络攻击 逾9万名成员受影响
伯尔尼州政府10月9日（周五）披露，伯尔尼养老金基金与伯尔尼教师保险基金共同使用的一家外部软件供应商在9月底遭到网络攻击。两家基金合计覆盖逾63,000名在保成员和28,000名退休人员（数据为去年年底统计），受影响人数逾9万。
据披露，该供应商在发现攻击后已向警方报案，州总检察长办公室正在调查。目前没有证据显示成员数据被窃取，但当局表示无法完全排除数据外泄的可能性。两家基金已启动应对程序，并将向受影响成员进一步通报情况。
这已是一周内瑞士养老金行业披露的第二起同类事件：联邦养老金机构 Publica 本周早些时候亦披露其一家供应商发生数据泄露。瑞士的职业养老金体系（所谓“第二支柱”）覆盖绝大多数在职人员，基金日常运营高度依赖外部 IT 服务商，供应链安全因此受到监管与舆论关注。
近年来，针对公共机构及其外包服务商的勒索软件与数据窃取攻击在欧洲持续上升。伯尔尼州表示，将根据调查结果评估是否需要调整对供应商的安全要求。
来源：Keystone-SDA/swissinfo.ch 报道。
Cyberattack on Supplier Affects Over 90,000 Members of Two Bern Pension Funds
The canton of Bern disclosed on Friday 9 October that an external software supplier used by both the Bern Pension Fund and the Bern Teachers' Insurance Fund was hit by a cyberattack at the end of September. Together, the two funds cover more than 63,000 insured members and 28,000 pensioners — over 90,000 people in total, based on year-end figures.
The supplier reported the attack to the police, and the cantonal public prosecutor's office is investigating. There is currently no evidence that members' data was stolen, though authorities said a leak cannot be entirely ruled out. Both funds have activated their response procedures and will keep affected members informed.
It is the second such disclosure in Swiss pensions within a week: the federal pension fund Publica also revealed a data breach at one of its suppliers earlier this week. Switzerland's occupational pension system — the 'second pillar' covering most employees — relies heavily on external IT providers, putting supply-chain security under regulatory and public scrutiny.
Ransomware and data-theft attacks on public institutions and their contractors have been rising across Europe. The canton of Bern said it would assess, in light of the investigation, whether security requirements for suppliers need tightening.
Source: Keystone-SDA/swissinfo.ch reporting.
图片来源：数据中心机房（资料图），BalticServers.com 摄，CC BY-SA 3.0（Wikimedia Commons）
