Yazılar

UBS and Pictet Report Data Leak Following Cyber Attack on Service Provider; Client Data Safe

Swiss banks UBS and Pictet disclosed on Wednesday that they were affected by a data leak caused by a cyber attack on their Swiss-based service provider, Chain IQ. Despite the breach, neither bank reported any compromise of client information.

According to Swiss newspaper Le Temps, tens of thousands of UBS employees’ data, including contact details and a direct internal line to UBS CEO Sergio Ermotti, were stolen. Chain IQ, headquartered in Baar, provides services to major firms including KPMG and Mizuho.

UBS confirmed that the incident involved stolen information related to the bank and other companies, emphasizing that no client data was affected. The bank said it responded quickly to mitigate operational impacts.

Chain IQ revealed that the cyber attack targeted it and 19 other companies, with some data published on the darknet. The firm stated that countermeasures were immediately implemented to contain the situation but declined to comment on ransom demands or communications with attackers due to ongoing investigations.

KPMG, listed as a Chain IQ client, said its infrastructure remained unaffected but enhanced its security protocols in response to the breach.

Pictet reported that only invoice-related information involving some of its suppliers, such as technology providers and consultants, was stolen. The private bank reassured that client data remained secure and stressed the importance of strict controls to prevent unauthorized access.

Swiss financial regulator Finma is overseeing the case according to standard procedures.

Cybersecurity expert Ilia Kolochenko of ImmuniWeb warned that breaches at third-party vendors pose a significant risk even to top financial institutions, potentially affecting the long-term trust in Swiss banking.

BBVA Advises Wealthy Clients to Allocate Up to 7% in Bitcoin, Signaling Growing Institutional Embrace of Crypto

BBVA, one of Spain’s largest banks, is advising its private banking clients to allocate between 3% and 7% of their portfolios to cryptocurrencies, primarily bitcoin and ether, according to Philippe Meyer, head of digital & blockchain solutions at BBVA Switzerland.

Speaking at the DigiAssets conference in London, Meyer stated the advisory began in September 2023, reflecting a growing confidence in the sector. While many banks passively allow crypto investments, BBVA stands out by actively recommending such allocations — a rare move among mainstream European financial institutions.

“With private customers, since September last year, we started advising on bitcoin,” Meyer said. “The riskier profile, we allow up to 7% of portfolios in crypto.”

Context and Strategy:

  • BBVA started executing crypto trades for private clients in 2021, but this is the first time it has formally advised allocations.

  • The recommendation currently includes bitcoin and ether, with plans to extend coverage to other digital assets later in 2025.

  • Meyer emphasized that even a 3% allocation can boost portfolio performance without exposing clients to excessive risk.

Market Momentum:

Bitcoin hit record highs in May, continuing its recovery from the crypto market collapse in 2022, which saw major platforms like FTX implode. The rebound has been aided by increased institutional interest and a pro-crypto stance from U.S. political figures, including Donald Trump.

Despite these advances, regulatory bodies remain cautious:

  • The European Securities and Markets Authority (ESMA) noted earlier this year that 95% of EU banks still do not engage in crypto activities.

  • Regulators consistently warn investors of crypto’s volatility, reiterating that one should be prepared to lose their entire investment.

BBVA’s approach reflects a nuanced shift in institutional sentiment, especially for wealthy clients seeking diversification amid evolving digital asset landscapes.

Swiss Inquiry Exposes Oversight Failures in Credit Suisse Collapse but Blames Bank Leadership

Swiss lawmakers have released a scathing report detailing the collapse of Credit Suisse in March 2023, highlighting systemic failures in the oversight of the financial sector while laying the primary blame on the bank’s mismanagement. The 569-page document, published after months of investigation, criticized Swiss regulatory authorities for lacking transparency and acting inconsistently during the crisis, though it acknowledged their role in averting a global financial meltdown.

Credit Suisse, a 167-year-old institution and Switzerland’s second-largest bank, was rescued by arch-rival UBS in a government-brokered deal for a fraction of its value. The collapse left Switzerland with only one major international bank, UBS, whose balance sheet now exceeds the size of the country’s entire economy.

A parliamentary committee, known as PUK, was formed in June 2023 to examine the government’s response to the crisis. While the inquiry determined that “years of mismanagement” by Credit Suisse leadership caused the crisis, it found no direct misconduct by Swiss authorities. However, it sharply criticized their lack of record-keeping during crucial crisis meetings involving the finance ministry, the central bank, and the financial regulator FINMA.

Key Findings and Recommendations

The report chronicled the bank’s chaotic final days, revealing that discussions about Credit Suisse’s potential demise had been ongoing for months. However, these discussions were often informal, unstructured, and poorly documented. Former Finance Minister Ueli Maurer and ex-Swiss National Bank Chairman Thomas Jordan were singled out for initiating “non-meetings,” which bypassed established crisis-management protocols and created a “parallel format” to avoid leaks.

The committee recommended reforms closely aligned with the government’s initial “too-big-to-fail” proposals from April 2023. These include:

  • Strengthening FINMA: Bolstering the financial regulator’s oversight powers and limiting its ability to grant concessions on capital requirements for banks.
  • Reevaluating Capital Buffers: Ensuring that systemically important banks like UBS hold sufficient capital to weather future crises.
  • Incentive Realignment: Addressing excessive bonuses in the financial sector, noting that Credit Suisse management had received bonuses exceeding 34 billion Swiss francs ($37.9 billion) between 2010 and 2022, despite the bank incurring equivalent losses during that period.
  • Improving Governance: Mandating better communication and handover protocols within government departments, especially during periods of financial instability.

The report criticized the transition between former Finance Minister Maurer and his successor Karin Keller-Sutter. Maurer downplayed Credit Suisse’s vulnerabilities, assuring Keller-Sutter that the bank was stable just months before its collapse. The committee concluded that the handover of information was insufficient and contributed to delays in addressing the crisis.

Keller-Sutter, who took office in January 2023, was credited with injecting urgency into the government’s response. However, the report found that she failed to keep the Swiss cabinet adequately informed about the evolving situation, leaving many members unaware of the bank’s dire state until its final days in March 2023.

Broader Implications for Switzerland’s Financial Sector

The inquiry highlighted how Credit Suisse’s collapse has left Switzerland grappling with the risks posed by “too-big-to-fail” institutions. UBS, now the country’s sole global bank, has argued against further capital requirements, warning that excessive regulation could harm its competitiveness and deter investment in Switzerland.

Nevertheless, the PUK report underscores the need for stricter oversight and systemic reforms. It urged the government to prioritize transparency, accountability, and proactive risk management to prevent a repeat of such a crisis.

As Switzerland’s financial sector faces calls for reform, the report serves as a reminder of the delicate balance between fostering market confidence and ensuring robust regulatory safeguards.