Brenner Base Tunnel SE has confirmed that unauthorized parties accessed company data, following claims by the Everest extortion group that it stole 812 gigabytes of files. The incident, which reportedly occurred in mid-October, is currently under investigation by forensic experts and authorities, with further coverage provided by Security Affairs.
The company stated that its operational systems remain unaffected and isolated from the breach. While the Everest group alleges a significant data theft, experts note that such criminal organizations frequently exaggerate the volume of stolen information. The potential exposure of project drawings and site procedures raises concerns regarding reconnaissance, though the tunnel is not scheduled to open until 2034, rendering some older design documents obsolete. There is currently no evidence suggesting that attackers gained access to industrial control systems or that the tunnel’s physical security is at risk. The Everest group, known for Russian-speaking operations, previously targeted Stadler Rail in July using stolen credentials. Security professionals emphasize that the focus should remain on identifying exposed information, revoking compromised credentials and securing document management systems. Analysts warn against spreading alarmist narratives, which can inadvertently support propaganda efforts, and stress the need for clear answers regarding the relevance and scope of the stolen data. The investigation continues as officials evaluate the impact on suppliers and project integrity.
Source: Security Affairs
