Swiss bankers call for delay to ownership register after Liechtenstein hack

The Swiss wealth management industry is pressing the government to postpone the introduction of a central register of ultimate company ownership, citing urgent cyber security concerns following a hack at Liechtenstein’s equivalent registry. The Swiss Bankers Association and other financial industry groups argue that the attack, which compromised sensitive ownership data in a neighboring jurisdiction, exposes the vulnerability of a planned Swiss register that would list the ultimate owners of more than half a million companies, partnerships, and foundations. The call for delay represents a direct challenge to Switzerland’s efforts to align with international anti-money laundering standards.

The proposed register is intended to fulfill recommendations from the Financial Action Task Force, the global money laundering watchdog, which has pressed Switzerland to make beneficial ownership information more transparent. Under current Swiss law, companies maintain their own shareholder registers, but authorities cannot easily cross-reference these records across cantonal boundaries. The new central database would give law enforcement, tax authorities, and financial intermediaries a single point of access to identify who ultimately controls and profits from legal entities. However, the wealth management sector now warns that concentrating such a sensitive dataset creates a high-value target for criminals, foreign intelligence services, and rogue actors.

The Liechtenstein hack provides a concrete and uncomfortable precedent. That registry, smaller in scale than the proposed Swiss system, was breached by a group that published the names and addresses of thousands of beneficial owners. For Switzerland’s private banking industry, which manages an estimated 2.6 trillion Swiss francs in offshore wealth, the reputational and commercial risks are acute. If a similar breach were to occur in Switzerland, it could expose clients who have legitimate privacy needs, such as high-net-worth individuals from unstable jurisdictions, while also potentially enabling identity theft, extortion, or competitive intelligence gathering by state and non-state actors.

The bankers’ position is not without trade-offs. Delaying the register would prolong Switzerland’s vulnerability to FATF pressure and could lead to the country being placed on the watchdog’s grey list, which would increase compliance costs for financial institutions and damage Switzerland’s standing with international partners. The Liechtenstein hack has also been invoked by transparency advocates as evidence of the need for stronger national cyber defenses rather than a reason to retreat from transparency. They argue that the correct response is to invest in security infrastructure, not to shelve a policy that addresses the core problem of anonymous shell companies used for money laundering, tax evasion, and sanctions evasion.

The deeper question is whether Switzerland can reconcile its traditional role as a discreet wealth management hub with the modern demand for automatic information exchange and public registries. The hack in Liechtenstein has not only triggered a security debate but has also opened a broader political discussion about the balance between privacy and transparency, a balance that Swiss policymakers have long tried to calibrate carefully. As the consultation period on the registry continues, the industry’s push for a delay will test whether Switzerland prioritizes its commitments to global financial standards or the safeguarding of its clients’ data against an increasingly sophisticated threat environment.