BBT SE, the company building the Brenner Base Tunnel between Italy and Austria, confirmed unauthorized access to some of its data. The Everest extortion group claims 812 GB, which nobody has verified. Security Affairs wrote a calm breakdown worth reading.
The facts so far
- The intrusion reportedly dates to mid-October. Austrian press broke it Nov. 6.
- BBT SE told ANSA on Nov. 7 that operations aren’t affected, the systems involved are isolated, and forensics teams and authorities are on it.
- No evidence of access to industrial or control systems, and no confirmed encryption.
- The tunnel won’t open before 2034 (about €11.7 billion), so older drawings may not match the final design.
My take
Stolen drawings help attackers do recon and help scammers impersonate the project, but knowing how a tunnel is built isn’t the same as controlling it. The lessons are the boring good ones: find out what leaked, revoke credentials, and keep document systems separated from OT networks.
God Bless, and Use the Source!
