The key facts

  • BBT SE confirmed the cyberattack and reported isolating the affected data source
  • The Russian-speaking group Everest is suspected, according to the newspaper citing a ZeroFox analysis
  • The company stated that the tunnel's operational processes were not affected; responsibility has not been confirmed

What happened

BBT SE, the company operating the Brenner Base Tunnel between Austria and Italy, confirmed to the Tiroler Tageszeitung newspaper that it had been hit by a cyberattack. The incident became known on Friday, November 7, citing local media (Anadolu).

Who is suspected and how the company responded

According to the newspaper, the Russian-speaking group Everest may be behind the attack; it has been linked to an international cyber-extortion network. According to an analysis by the American company ZeroFox cited in the publication, this group steals confidential data, threatens to publish it, and demands a ransom from its victims. BBT SE said that after detecting the attack it immediately isolated the affected data source and notified the competent authorities. The company refused to answer questions about whether it had negotiated with the hackers or made any payments.

Consequences for the project

According to the company's current assessment, the tunnel's operational processes have not been affected; the investigation into the details of the attack is ongoing. Responsibility for the incident has not yet been confirmed — the version implicating Everest remains a media assumption, not an established fact.