Switzerland's federal IT office said hackers exploited Microsoft SharePoint vulnerabilities to breach its servers and compromise approximately 200 accounts, BleepingComputer reports. The Federal Office for Information Technology and Telecommunication detected unusual activity on July 28, blocked external access, patched suspected flaws and reset passwords for affected accounts.

The agency believes attackers exploited SharePoint vulnerabilities disclosed by Microsoft in mid-July, but has not identified which flaw was used. The attack potentially involved either CVE-2026-56164, a privilege escalation vulnerability, or CVE-2026-50522, a critical remote code execution flaw — both fixed in July Patch Tuesday updates.

BIT said it has found no evidence that data beyond login credentials was stolen, noting that confidential and sensitive personal data are not permitted on the affected platform. The agency is investigating with the Swiss Federal Office for Cyber Security and Microsoft. No ransomware or extortion group has claimed responsibility.