Switzerland’s Cyber Snitch Mandate: Report or Pay the Price!
Switzerland is rolling out a cyber-attack reporting mandate for critical infrastructure operators. Starting April 2025, energy suppliers, transport companies, and more must report attacks within 24 hours or face unspecified fines. So, if your water supply gets hacked, remember: it’s not just your taps that need a quick fix!

Hot Take:
Switzerland is rolling out the welcome mat for cyber-attack reports, making it mandatory for critical infrastructure operators to spill the digital beans. It’s official: ignoring your cyber woes now comes with a side dish of fines! Brace yourselves, Swiss infrastructure, because reporting cyber-attacks is about to become your new national pastime.
Key Points:
- Switzerland introduces a cyber reporting mandate for critical infrastructure.
- Operators must report cyber-attacks to the National Cyber Security Centre (NCSC) within 24 hours.
- Fines will be imposed for failure to report qualifying cyber incidents.
- A grace period will last until October 1, 2025, for organizations to adjust.
- Similar reporting requirements exist in countries like the US, UK, and Australia.
Already a member? Log in here