Swiss cheese security? Play ransomware gang milks government of 65,000 files

The Swiss National Cyber Security Center reports that the Play ransomware gang breached IT supplier Xplain in May 2023, exfiltrating 1.3 million files—about 65,000 of which related to the Swiss Federal Administration—including roughly 5,182 sensitive records containing PII, classified documents, passwords, and technical documentation; some stolen material is believed to have been published on the dark web, and an administrative investigation led by the NCSC is ongoing to determine root causes and remediation.