Summary
Written by ThreatClusterfrom site fields, victim profile, leak post, screenshot, ransom noteEverest claims to have exfiltrated 812 GB of data from Brenner Base Tunnel, associated with the bbt-se.com domain. The leak post is published and shows a countdown timer toward a data release; the ransom note states the files will be published after the timer ends and that the company still has time to contact the group, with the page asserting that the 812 GB DataBase is present. ThreatCluster captured a screenshot of the leak post.
Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.
What was taken
[AI generated] The Brenner Base Tunnel (Brennerbasistunnel, BBT) is a major railway infrastructure project, not a company in the traditional sense, though it is managed by Brenner Base Tunnel BBT SE, a joint venture between Austria and Italy. It operates in the construction and transportation infrastructure industry, building a 55-kilometer rail tunnel beneath the Alps connecting Innsbruck, Austria, and Fortezza, Italy, to improve freight and passenger rail links across Europe.
Ransom note
Published by the group on their leak site, reproduced verbatim.
MEMBERS ONLY decrypting . . . Password required Enter password The files will be published after the timer counts down. The company still has time to get in touch with us This post unlocks when the timer ends.
Also stated on the leak page
Fields this group publishes that do not map to a standard column. Labels are the site's own.
- bbt-se.com 812 GB DataBase
- present
Leak-site images (11)
Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.