THE Everest Group cybercriminal gang gained unauthorised access to a data exchange platform shared with a Stadler supplier in mid-July and demanded a ransom of SFr 10m ($US 12.3), which Stadler is refusing to pay.
“Stadler will not pay a ransom under any circumstances and refuses to yield to extortion,” the company said in a statement on July 21. Stadler has filed a criminal complaint with the Thurgau Cantonal Police.
“Access to this specific technical data was gained via compromised login credentials for a data exchange platform which subsequently fell into the hands of cybercriminals,” Stadler says. “Stadler’s IT systems were not compromised and remain intact.”
Stadler says the data consists of technical information from a supplier that is not safety critical. The company confirms that it did not lose any data as a result of the incident, and no relevant personal data was stolen.
“All vehicles in operation worldwide are unaffected and production continues as normal across the globe,” Stadler says.
