Hackers breach Beneficial Ownership Registry – data of 31,000 companies affected

A breach in the Beneficial Ownership Registry has exposed copies of data linked to around 31,000 legal entities after unknown attackers gained unauthorized access to the Beneficial Ownership Registry (VwbP). Authorities confirmed that the cyberattack prompted an immediate response, including disconnecting the affected system, launching a technical investigation and setting up a government crisis team to handle the incident.

See also: Proton Data Breach Observatory: Notifies you when your personal data appears on the Dark Web

According to official information, the attackers gained digital access to the VwbP during the night of July 30, 2026. Anomalies were detected later that day by the Office of Justice, which then contacted the Office of Information Technology to investigate the incident. Based on the initial findings, the affected system was immediately secured and removed from external access, while researchers began a detailed analysis.

On July 31, 2026, the government was informed that the breach of the Beneficial Ownership Registry may have been successful. The first confirmed findings from the preliminary investigation were submitted on the afternoon of August 1.

Authorities said the attackers illegally accessed the directory and stole copies of data related to around 31,000 legal entities. The Beneficial Owners Register (VwbP) stores information on the beneficial owners of companies, foundations and trusts.

Officials said the registry has been temporarily disconnected for external users via the LLV.li website while investigations continue. Based on current findings, there is no indication that any information stored in the system was modified or deleted during the incident.

Establishment of a Government Crisis Team After confirming the incident, the government convened a crisis team on the evening of August 1, 2026. The team immediately began its work and was officially confirmed on August 2.

See also: Hackers Target SonicWall Firewalls from 4,000+ IP Addresses

The crisis team is led by Prime Minister Brigitte Haas and Justice Minister Emmanuel Sandler. According to the government, its priorities are to fully investigate the incident, inform the affected people and implement appropriate countermeasures.

GDPR Data Breach Notification Process in Progress The authorities have confirmed that the incident qualifies as a data breach involving personal information under Article 33 of the General Data Protection Regulation (GDPR).

The crisis team said it is working to notify affected individuals in accordance with Article 34 GDPR as soon as possible. A central information point is also being set up to answer questions from those affected by the breach.

What is the Beneficial Ownership Register? The Beneficial Ownership Register (VwbP) was created to support the prevention of money laundering and the fight against the financing of terrorism. It contains information identifying the beneficial owners of legal entities, including companies, foundations and trusts.

The registry operates under the Act on the Registry of Beneficial Owners of Legal Entities (VwbPG), which came into force in 2021 to implement the requirements of the 5th EU Anti-Money Laundering Directive.

See also: Pornhub: Hackers stole activity data of Premium users

Authorities are continuing to investigate how the unauthorized access occurred and whether additional measures will be required to strengthen the registry's security. At this stage, officials have only confirmed that copies of data were accessed and that there is currently no evidence to suggest that records within the system were modified or deleted.