Brenner Base Tunnel SE, the company building the rail tunnel between Italy and Austria, has confirmed that unauthorized people accessed some of its data. The Everest extortion group claims to have taken 812 GB, a figure that remains unverified.
What Brenner Base Tunnel SE Has Confirmed
BBT SE told the Italian news agency ANSA on November 7 that operations are unaffected and that the systems involved have been isolated. The company has engaged outside forensic experts and the authorities. The statement followed Austrian press reports that broke the story on November 6.
There is no evidence that industrial systems were accessed or tampered with, and no encryption has been confirmed. Claims that ransomware could halt the tunnel are therefore unsupported by the facts reported so far.
Intrusion Reportedly Dates to Mid-October
The intrusion reportedly occurred in mid-October, and Everest’s claim carries an October 17 date. That leaves a gap of about three weeks between the group’s claim and the company’s public acknowledgment.
Everest’s Claim and Its Reliability
Everest is a Russian-speaking extortion group. ZeroFox notes that it tends to exaggerate the volume of data it claims to have stolen. The 812 GB figure should therefore be treated with caution until BBT SE or independent analysis verifies it.
Project Scale and the Value of Leaked Material
The tunnel is not due to open before 2034, and its projected cost is about 11.7 billion euros. Because construction is long-running, leaked drawings may be outdated. The content of the data is not confirmed, but potential exposure includes drawings, surveys and site procedures.
Risks Beyond the Tunnel Itself
The potential consequences described are indirect. Drawings and site procedures could reveal how a large infrastructure project is organized, and project names and contractor details could be used in fraud against suppliers and contractors. The reported risk is contractor fraud using the project’s name, not interference with construction.
The case reflects the way extortion groups target organizations whose public profile amplifies the pressure of a leak. A tunnel project of this size attracts attention, and a claim attached to a well-known name travels quickly through press coverage, whatever the underlying data contains.
Questions Still Open on Everest’s Data
The sources do not establish what categories of data the group holds, whether the company has seen a sample, or whether Everest has made demands or published material. They also do not say how the attackers gained access. The company has not described the cause or the number of affected people, if any.
For now the verified facts are narrow: unauthorized access occurred, systems were isolated, forensic experts are engaged, and operations continue. Everything else, including the data volume and the claim that the breach is significant, rests on the extortion group’s own statements.
Timeline of the Brenner Base Tunnel Disclosure
The sequence of events spans several weeks. The intrusion reportedly dates to mid-October, and Everest’s claim carries the date October 17. Austrian press broke the story on November 6, and BBT SE issued its statement to ANSA on November 7. The company’s confirmation came only after the claim reached the press.
The statement’s content is narrow by design: unauthorized people accessed some data, operations are unaffected and the involved systems are isolated. The company has not disputed or confirmed the 812 GB figure.
The coverage frames the story as one that should be read calmly, noting that the lack of encryption means there is no basis for claims that ransomware stopped the tunnel. Everest’s claim concerns data theft and extortion, not an operational shutdown.
The tunnel’s 2034 opening date and 11.7 billion euro cost put the project among Europe’s major rail infrastructure efforts, which is part of why the claim draws attention.
