Cyberattack on Liechtenstein’s Beneficial Owners Register Exposes Data of 31,000 Legal Entities On July 30, 2026, unknown attackers breached Liechtenstein’s Register of Beneficial Owners (VwbP), accessing data copies linked to approximately 31,000 legal entities, including companies, foundations, and trusts. The intrusion was detected later the same day by the Office of Justice, prompting an immediate response from the Office of Information Technology. Authorities secured the affected system by removing it from external access and taking the register offline for external users via the LLV.li website. While initial findings indicate no evidence of data alteration or deletion, the breach involved unauthorized access to sensitive information identifying beneficial owners, mandated under the 2021 Law on the Register of Beneficial Owners (VwbPG) to comply with the EU’s 5th Anti-Money Laundering Directive. A government-led crisis team, led by Prime Minister Brigitte Haas and Justice Minister Emanuel Schädler, was convened on August 1, 2026, and formally confirmed the following day. The team’s priorities include a full investigation, notifying affected individuals under Article 34 of the GDPR, and implementing countermeasures. A central information point has been established to address inquiries from impacted parties. The incident qualifies as a GDPR data breach, triggering a formal notification process. Authorities continue to assess how the breach occurred and whether additional security measures are needed to prevent future incidents.