UBS, Pictet Among Companies Hit by Data Leak After Cyberattack on Procurement Firm — Update

By Adria Calatayud

UBS Group, Pictet and Implenia said they were among the companies affected by a cyberattack on procurement firm Chain IQ.

Swiss financial groups UBS and Pictet said Wednesday that no client data was involved in the cyberattack, while construction company Implenia said it assumed no sensitive data was affected.

"A cyberattack at an external supplier has led to information about UBS and several other companies being stolen. No client data has been affected," the bank said. "As soon as UBS became aware of the incident, it took swift and decisive action to avoid any impact on its operations."

Data on UBS employees, including Chief Executive Sergio Ermotti, was compromised, according to a person familiar with the matter.

Wealth manager Pictet said information obtained through the cyberattack on Chain IQ systems was limited to invoice information from recent years with certain suppliers such as technology providers or external consultants. Pictet has protocols and agreements in place to prevent unauthorized access, it said.

Implenia said it was informed by Chain IQ about a breach in its systems and immediately took action. Implenia has temporarily suspended data exchange with Chain IQ as a precaution and will take further measures if necessary, it said.

Accounting firm KPMG, another Chain IQ customer, said its infrastructure hadn't been affected by the cyberattack at its supplier and that it had put in additional safeguards following the news.

Chain IQ last week said that it had been targeted alongside 19 other companies in a cyberattack that led to a leak of data subsequently published on the dark web.

The company said at the time that the situation had been contained and that all necessary countermeasures were initiated. Chain IQ contacted the policy in order to open a criminal investigation, it said.

Write to Adria Calatayud at adria.calatayud@wsj.com