Cyberattack on the Brenner Base Tunnel construction site, systems isolated

The company BBT SE, which manages the Brenner Base Tunnel project, has confirmed it was hit by a cyberattack. This is reported by the Austrian newspaper Tiroler Tageszeitung, according to which the infrastructure project had already been targeted in mid-October, and the news is also confirmed by the newspaper l’Adige.

According to BBT SE’s official statement, unauthorized parties gained access to data reachable via the internet. The company isolated the affected systems, activated internal security protocols and brought in external specialists to conduct forensic analyses of the incident. The relevant authorities have been informed and investigations are ongoing, while BBT SE has not provided details on the exact nature of the stolen data nor on the amount of information involved.

There is speculation about a possible link to the Russian-speaking cybercriminal group known as Everest, but this is for now an unconfirmed attribution: neither of the two sources consulted reports an official claim of responsibility or definitive evidence on the identity of the perpetrators. Caution in attribution remains a central element of the case, in a context where cross-border transport infrastructure is considered a sensitive target for this type of attack.

On the operational front, BBT SE states that, based on the information available at this stage, the attack has had no consequences on ongoing activities or on the tunnel construction works, one of the most significant railway projects in Europe. However, this is a statement from the company involved, not an independent verification: the ongoing forensic analyses will need to establish the actual extent of the breach and which categories of data were compromised, an element that has not yet been publicly clarified.