Swiss Rail Giant Stadler Rejects $12.3M Ransom Demand After Cyberattack

In mid‑July 2026 the Everest ransomware group accessed a third‑party supplier file‑sharing platform used by Stadler Rail, downloaded internal business and project documents, and demanded CHF 10 million in cryptocurrency; Stadler reported no compromise of its core IT or production systems, declined to pay, and filed a police report. The report profiles Everest's double‑extortion model and insider recruitment tactics, frames the incident as a supply‑chain/third‑party risk to the rail sector, and lists immediate mitigations such as enforcing MFA, auditing shared platforms, and applying least privilege.