Skip to content
Brenner Base Tunnel Cyberattack: Data Breach by Everest Group

Brenner Base Tunnel Cyberattack: Data Breach by Everest Group

First seen 8 Nov 2026, 16:48 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 8, 2026 at 20:50 UTC
  • •Brenner Base Tunnel SE experienced a cyberattack on 17 October 2026.
  • •The group Everest claims to have stolen 812 GB of data, but this remains unverified.
  • •High-security data was not compromised, and construction activities are ongoing.

Brenner Base Tunnel SE confirmed a cyberattack on 17 October 2026, with unauthorized access to data available online. The Russian-speaking group Everest claims to have stolen 812 GB of files, though this has not been verified. BBT SE stated that high-security data was not affected and that construction and operations remain unaffected. The attack is under investigation by authorities, and while Everest is linked to the incident, the full scope of the breach and the specific data accessed remain unclear. The investigation includes potential connections to broader cyber threats against strategic infrastructure in Europe. The FBI is involved in information-sharing efforts related to the incident. As of now, there are no confirmed ransom demands or indications of operational disruption.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 2d ago How this analysis works

Timeline

2026-10-17
Cyberattack on Brenner Base Tunnel confirmed
Brenner Base Tunnel SE reported unauthorized access to some data, with no impact on construction or operations.
Shattered
2026-11-06
Austrian press reports on cyberattack
The first wave of coverage about the cyberattack appeared in the Austrian press, revealing the incident.
Securityaffairs
2026-11-07
BBT SE confirms breach details
BBT SE confirmed the breach and stated that operations were unaffected, bringing in external cybersecurity specialists.
Shattered

More articles in this cluster (9)

Following this threat?

Track hyflock and BBT SE in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (10)

1 / 4

Common questions

What type of data was accessed?
The attackers accessed data that was available online, but specific details about the data types remain unclear.
Is the Brenner Base Tunnel project at risk?
No, BBT SE confirmed that construction and operational processes are not affected by the cyberattack.
What actions are being taken in response?
BBT SE has activated cybersecurity procedures, isolated affected systems, and engaged external experts for forensic analysis.