Stadler Rail hit by ransomware attack

Incident

First reported

22.07.2026 19:59

Last updated

22.07.2026 19:59

Happening score

H score 41

1 unique sources, 1 articles

Summary

Hide ▲

Stadler Rail disclosed a supplier-shared data exchange platform breach tied to the Everest ransomware gang, which demanded 10 million Swiss francs and about $12.3 million. The incident was identified as occurring in mid-July 2026 and was handled as a criminal extortion case. Stadler said its IT systems and production operations were not impacted, limiting the operational fallout to the stolen data and ransom threat.

Related Happenings

Nidec Chaun Choung Technology hit by ransomware attack

Incident

H score49 First: 30.06.2026 12:41 Last: 30.06.2026 12:41 Sources 1

About this happening: Nidec Chaun Choung Technology confirmed a ransomware attack that caused ransomware-originated damage to part of a server and forced emergency containment actions. The...

Open Happening

0APT and KryBit ransomware turf war forces rebuild and rebrand pressure

Threat Actor Meta

H score55 First: 28.04.2026 16:00 Last: 28.04.2026 16:00 Sources 1

About this happening: 0APT and KryBit escalated a ransomware turf war in April 2026 by leaking each other's operational data, defacing leak sites, and exposing infrastructure details that u...

Open Happening

Timeline

22.07.2026 19:59 2 articles · 2h ago

Stadler Rail hit by ransomware attack

Initial Disclosure
In mid-July 2026, Stadler Rail detected a breach involving a supplier-shared data exchange platform and received an extortion demand from Everest. The company then refused to pay and escalated the case to police.
Show sources

Swiss rail giant Stadler rejects $12.3M ransom demand after cyberattack — www.bleepingcomputer.com — 22.07.2026 19:59

Swiss rail giant Stadler rejects $12.3M ransom demand after cyberattack — www.bleepingcomputer.com — 22.07.2026 19:59
Open in new tab