Swiss visa appointments cancelled in UK due to ‘IT incident’

All appointments for Swiss (Schengen) tourist and transit visas have been cancelled across the UK.

TLScontact, the Swiss government’s chosen IT provider for facilitating visa applicants for citizens of third countries, has blamed an ‘IT incident’ at its London, Manchester, and Edinburgh centers for appointment cancellations.

With its 150 visa application centers and presence across 90 countries, TLScontact provides visa processing and IT services to several governments and claims to have handled millions of visa applications to date.

All Swiss visa appointments cancelled in UK

This week, TLScontact, Switzerland’s chosen outsourced provider of visa and consular services, has cancelled visa appointments for applicants at its London, Manchester, and Edinburgh centers, as observed by BleepingComputer.

The development has been blamed on an ongoing “IT incident.”

BleepingComputer also filled out a test form for a Swiss (Schengen) visa application, and we were presented with a blank screen at the subsequent step where appointment slots would otherwise appear:

British residents who are citizens of countries which require a visa to travel to Europe are required to apply via TLScontact when travelling to Switzerland, France, Belgium, or Germany. All four countries form part of the Schengen area, meaning possessing a valid (tourist or business) visa for one automatically grants the applicant travel access to the 27 Schengen countries.

Over the past few decades, rather than allocating in-house staff, embassies of many countries have opted to procure services of an external vendor, such as TLScontact, for facilitating visa application submissions and scheduling biometric appointments for applicants.

Consequently, in addition to collecting and holding on to physical documents, such as passports and visa application forms, outsourcing agencies like TLScontact possess highly sensitive information on applicants, including their:

• names, addresses, family biographical data, workplace and contact information
• biometrics, such as photographs and fingerprints collected during visa appointments
• travel history, prospective travel plans, copies of flight and hotel reservations
• legal documents such as employment contracts, tax returns, bank statements, and possibly copies of birth, marriage, or divorce certificates
• Biometric Residence Permits (BRPs) and ID cards

As such, it becomes paramount to ensure that IT systems of external visa processing agencies are functional and secure against cyberattacks.

BleepingComputer reached out to TLScontact prior to publishing to understand the cause of this ‘IT incident’ and when will appointments resume.

TLScontact has informed us, after the publication of this report, that the incident in question is not a result of a ransomware attack.

“We are currently experiencing technical difficulties with the transfer of customers’ biometric data to the Swiss government servers,” a TLScontact spokesperson told BleepingComputer.

“This issue was identified yesterday by our technical teams and they are working to resolve the problem as soon as possible. It only impacts our visa operations for Switzerland and no customer or employee data has been compromised.”

“While our teams work to resolve the issue, we have cancelled all Swiss visa appointments at our centres this week. All those customers affected have been notified and their appointments have been rescheduled for next week.”

After our calls to Swiss Embassy in London went to voicemail, we emailed the Embassy and received the following automated email acknowledgement confirming ongoing technical problems:

“Due to technical reasons, this week’s visa appointments at TLScontact had to be cancelled and rescheduled,” states the automated response sent to BleepingComputer from the visas department of Swiss Embassy in London.

“We are working together with TLScontact to fix the problems as soon as possible. TLScontact will contact all applicants for the next earliest appointment possible.”

Securing Schengen visa appointments is already hard

It’s a busy travel season. Third country citizens rely exclusively and heavily on outsourced visa processing partners like TLScontact, VFS Global, and BLS International—their only means of liason between themselves and foreign embassies, to be able to legally cross borders for short trips.

These applicants, some of whom have waited months to secure an appointment, are now struggling as TLScontact battles IT issues and has had to cancel their slots:

Even without IT hiccups, securing a Schengen visa appointment, particularly for prominent tourist destinations like Spain, France, Portugal, and much of Europe has become an impossible task during peak seasons over the past few years.

As an example, BleepingComputer can confirm that both VFS Global and BLS International centers across the UK have no appointment availablility for Schengen countries like Spain and Portugal for entire July and August this year—even if applicants opt for a “premium” (pricier) service route:

To complicate matters further, Schengen visa applicants must book a flight and hotel reservation in advance of their visa appointment—dates for which are often already laid out weeks or months in the future [1, 2] with no defined processing time.

A large-scale cancellation like this week’s is bound to cause disruptions to Swiss visa applicants who are now left at the mercy of the outsourced agency, and would have to reschedule or entirely forego their holiday plans.

Full disclosure: I have previously procured the services of TLScontact in London on one occasion in 2019, and of VFS Global on several occasions around the world.

Update, July 27th 01:32pm ET: Edited the article to include statement from TLScontact received after press time.

Source: https://www.bleepingcomputer.com/news/security/swiss-visa-appointments-cancelled-in-uk-due-to-it-incident/