Swiss government SharePoint breach compromised 200 accounts

Attackers exploited known vulnerabilities in Microsoft SharePoint servers hosting Swiss government systems, compromising approximately 200 accounts before detection. The core failure was a lag between Microsoft releasing critical SharePoint patches and their deployment on government infrastructure — a classic patch management gap that left internet-facing systems exposed. This incident highlights that public sector organizations are high-value targets, and delays in patching widely-used platforms like SharePoint can result in broad credential compromise. Timely patch application, especially for internet-facing services, is a non-negotiable baseline control for any organization managing sensitive government data.