Ricardo fixes security vulnerability affecting user data

Live.Deutsche-Boerse • October 9, 2026

SMG Swiss Marketplace Group Holding AG / Key word(s): Miscellaneous Ricardo fixes security vulnerability affecting user data 09.10.2026 / 14:01 CET/CEST

Media release Zurich, 9 October 2026

Ricardo, part of SMG Swiss Marketplace Group, has identified unauthorised access to personal data linked to orders on its platform. Email addresses and passwords were not exposed. The security vulnerability that allowed this access was promptly fixed.

Ricardo detected suspicious activity on its servers on 7 October 2026 and initiated immediate technical measures to secure its systems. The security vulnerability that allowed this access has been fully resolved. The ensuing investigation has since established that personal data relating to approximately 890 thousand user accounts was exposed. The exposed data was limited to names, postal addresses and telephone numbers and, for business users, company names. Email addresses and passwords were not affected.

Ricardo is informing affected users directly the incident, its implications and the precautions they can take. In accordance with legal requirements, Ricardo has notified the Swiss Federal Data Protection and Information Commissioner (FDPIC). Ricardo will also file a criminal complaint with the police and report the incident to the Swiss National Cyber Security Centre (NCSC).

SMG Swiss Marketplace Group Roswitha Brunner Head of Corporate Communication & Public Affairs [email protected] +41 76 577 15 29 Luka Janjis Director Investor Relations [email protected] +41 78 808 71 15

SMG Swiss Marketplace Group SMG Swiss Marketplace Group is a network of online marketplaces that brings people and businesses together, reduces complexity, and helps them make informed decisions. The portfolio includes Real Estate (ImmoScout24, Homegate, Flatfox, CASASOFT, IAZI), Automotive (AutoScout24, MotoScout24), General Marketplaces (Ricardo, tutti, anibis) and Finance & Insurance (FinanceScout24, moneyland.ch).

End of Media Release View original content: EQS News

2413310 09.10.2026 CET/CEST

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Ricardo Addresses Data Breach Affecting 890,000 User Accounts On October 7, 2026, Ricardo detected unauthorized access to personal data linked to approximately 890,000 user accounts. The breach involved names, postal addresses, and telephone numbers, but email addresses and passwords were not exposed. The security vulnerability was promptly fixed, and the company is directly informing affected users about the incident and recommended precautions. Ricardo has notified the Swiss Federal Data Protection and Information Commissioner (FDPIC) and plans to file a criminal complaint. The incident has been reported to the Swiss National Cyber Security Centre (NCSC). 2 sources 28

Extracted Entities

Ricardo fixes security vulnerability affecting user data

The full story

Extracted Entities

Attack Types (1)

Companies (2)

CWE Weaknesses (1)

Domains (1)