Swiss Rail Giant Stadler Refuses $12.3M Ransom Demand from Everest Group

Stadler Rail was targeted in mid‑July 2026 by the Everest extortion group, which used stolen supplier credentials to access a supplier data‑exchange platform and exfiltrate non‑sensitive technical supplier data; Everest demanded CHF 10 million, but Stadler publicly refused to pay, filed a criminal complaint with Thurgau police, and engaged external cybersecurity specialists. The breach did not affect Stadler’s core IT, operational systems, rolling stock, or personal/safety‑critical data, and as of July 23, 2026 the stolen data had not been posted and Everest had not publicly claimed the attack.