A cyberattack has compromised the personal data of approximately 31,000 individuals listed in Liechtenstein's register of beneficial owners, the principality's government confirmed.

The breach targeted the "register of economic beneficiaries," a database that identifies the real people behind companies, foundations, and trusteeships operating in Liechtenstein. According to the government, unauthorized access occurred overnight from Wednesday into Thursday last week. The intrusion was discovered on Thursday, prompting authorities to take immediate security measures and bring the affected system offline.

Officials stated that there are currently no indications any data was altered or deleted. However, the full scope of the exposure is still being assessed.

The government established a crisis unit over the weekend to investigate the incident and coordinate the response.

What Was Targeted

Liechtenstein's beneficial ownership register was created as part of broader efforts to combat money laundering and terrorist financing. Such registers have become a standard requirement across the European Economic Area, of which Liechtenstein is a member, following successive rounds of anti-money-laundering (AML) and countering-the-financing-of-terrorism (CFT) legislation. The EU's Fourth and Fifth Anti-Money Laundering Directives progressively expanded obligations on member states to maintain central registers of beneficial ownership and broaden access to them. These databases are designed to give competent authorities — and in certain cases, entities with a legitimate interest — access to information about who ultimately owns or controls corporate structures.

Context: Liechtenstein's Financial Sector

Liechtenstein is a small principality of roughly 40,000 residents situated between Switzerland and Austria. With a land area of about 160 square kilometers, it is one of Europe's smallest sovereign states. The financial services industry is a cornerstone of the Liechtenstein economy, alongside manufacturing. The country has historically been known as a wealth management center and has, over recent decades, adapted its regulatory framework to align with international transparency standards set by bodies such as the Financial Action Task Force (FATF) and the Organisation for Economic Co-operation and Development (OECD). Liechtenstein was removed from the OECD's grey list of uncooperative tax havens in 2009 after committing to transparency standards, marking a turning point in its efforts to shed its secrecy jurisdiction reputation.

The 31,000 individuals affected by the breach far exceed the principality's own population, indicating that many of those exposed are likely foreign nationals who use Liechtenstein's corporate and trust structures for asset management and estate planning.

The incident comes amid growing global attention on the security of beneficial ownership databases, which aggregate sensitive personal and financial information in centralized government systems. While transparency advocates have pushed for broader access to such registers to combat illicit finance, the Liechtenstein breach underscores the inherent tension between open beneficial ownership data and the protection of individuals whose information these systems hold.