Stadler Says Everest Demanded $12.3 Million After Data Platform Breach
Summary
Stadler says a breach of a data exchange platform shared with a supplier led to an extortion letter attributed to Everest demanding 10 million Swiss francs. The company refuses to pay and says production and IT systems were unaffected.
Key points
- Stadler says the incident occurred in mid-July and involved a data exchange platform shared with a supplier.
- The company says it received an extortion letter attributed to Everest demanding 10 million Swiss francs; Everest has not publicly claimed the attack.
- Stadler refused to pay and filed a criminal complaint with Thurgau cantonal police.
- Stadler says the stolen information was technical data that was not security-relevant; no relevant personal data was stolen.
- The company says its IT systems and global production were not affected and continue operating normally.
Article Details
- Victim Organization
- Stadler Rail
- Incident Type
- Data theft and ransomware-related extortion following a breach of a data exchange platform shared with a supplier.
- Data Types Exposed
- Non-security-relevant technical information
- Operational Impact
- Stadler Rail said its IT systems and global production were not affected and continued operating normally. The company also said its rail vehicles worldwide were unaffected.
- Ransom Or Extortion
- Stadler Rail reported receiving an extortion letter attributed to Everest demanding 10 million Swiss francs (about $12.3 million). The company refused to pay and filed a criminal complaint with Thurgau cantonal police. Everest had not publicly claimed the attack.
- Claim Status
- confirmed