Stadler Says Supplier Platform Incident Exposed Technical Data, Not Its Systems

Summary

Stadler reports that compromised credentials enabled access to a supplier’s data exchange platform in mid-July, exposing supplier technical information. It says its systems and personal data were unaffected; Everest Group claims responsibility and demands CHF 10 million

Key points

• In mid-July 2026, compromised credentials were used to access a supplier’s data exchange platform, according to the report.
• Stadler says technical information from the supplier was exposed, but no data was taken directly from Stadler’s IT infrastructure.
• Stadler says its internal systems were not compromised and no personal data was affected.
• The company says production and train operations continue without disruption.
• Everest Group claimed responsibility in an extortion letter and demanded 10 million Swiss francs; the claim is not independently confirmed in the article.
• Stadler says it will not pay and has filed a criminal complaint with Thurgau cantonal police.
• The article notes that a previous Everest Group claim against Bitbox was later found to be false, with the published data traced to an older third-party leak.

MITRE ATT&CK

Threat Actors