Brenner Base Tunnel operator confirms data breach; extortion group claims 812 GB
- Severity
- Medium
- Sources
- 1
What happened
Brenner Base Tunnel SE confirmed unauthorised access to some data; the intrusion reportedly dates to mid-October, with Everest claiming 812 GB on 17 October. The claimed volume is unverified, and ZeroFox has noted the group tends to exaggerate. No evidence has been published of access to industrial or control systems, and encryption has not been confirmed. Defenders should identify exposed information, revoke potentially compromised credentials, keep document management separate from industrial control networks, and warn suppliers about fraudulent requests. Everest separately demanded CHF 10 million from Stadler Rail in July after using stolen credentials to access a supplier's data platform.
For security analysts · Written by AI from 1 source · Wrong?
What to do
- Identify which information was exposed in the incident.
- Revoke potentially compromised credentials.
- Keep document management systems separate from industrial control networks.
- Warn suppliers about possible fraudulent requests.
Written by AI from the sources, checked against them