everest

Everest is a ransomware group that operates an extortion-focused model, breaching networks to exfiltrate data and threatening to publish it on the dark web unless a ransom is paid. Victims span healthcare, technology, business services, financial services, and manufacturing, with the United States, Italy, the United Arab Emirates, Spain, and Germany most affected. Recent reporting shows a pattern of large-scale data exfiltration followed by ransom demands or threats to leak the data, illustrated by Everest’s breach of Stadler Rail and a CHF 10 million ransom demand after attackers accessed a supplier data-exchange platform. Across the reported incidents, Everest has claimed breaches affecting multiple sectors and regions, with about 240 victims claimed.

Sectors: Healthcare, Technology, Business Services · Countries: US, IT, AE