Liechtenstein beneficial-owner register attack exfiltrates data and suspends service

Unknown attackers gained unauthorized access to Liechtenstein's Register of Beneficial Owners during the night of 29-30 July 2026 and exfiltrated copies of data relating to approximately 31,000 legal entities. The Office of Justice took the register offline, leaving it unavailable to external users while security analysis continued. The government later determined that faulty authorization-checking logic allowed repeated requests to exploit the register API.