HackerFeeds
All ransomware incidents
stadlerrail.com

Ransomware group everest hits Stadler Rail

MEDIUM
·Transportation·CH·2026-07-28

Stadler Rail — a transportation target operating in CH has been listed by the everest ransomware group on 2026-07-28. The information below reflects what the threat actor has publicly claimed on their leak site; the details have not been independently verified.

Incident Report

Target OrganizationStadler Rail
Threat Group
everest
Summary[AI generated] Stadler Rail is a Swiss manufacturer of railway vehicles headquartered in Bussnang, Switzerland. Founded in 1942, the company designs and produces a wide range of trains including regional and intercity trains, trams, metros, and rack railways. It operates globally, supplying rail operators across Europe, the Americas, and beyond, and is recognized for its FLIRT and KISS train families.
Date of Breach2026-07-28
Discovery Date2026-08-05
RegionCH
Target Domainstadlerrail.com
Business SectorTransportation
Severity
MEDIUM

Claim by everest

[AI generated] Stadler Rail is a Swiss manufacturer of railway vehicles headquartered in Bussnang, Switzerland. Founded in 1942, the company designs and produces a wide range of trains including regional and intercity trains, trams, metros, and rack railways. It operates globally, supplying rail operators across Europe, the Americas, and beyond, and is recognized for its FLIRT and KISS train families.

Posted by the everest threat actor on its public leak site. This is the group's own statement and has not been independently verified by HackerFeeds.

Sources

Victim website

stadlerrail.com

Leak post (onion / Tor)

tor

http://everestndkvzcibcje2cqxhre2hmmybl3rn2gwzwsblz7gx6uryn5rad.onion/news/stadler-rail

Open this URL in Tor Browser. Browsing leak sites carries real risk — view passively, never click further.

Disclaimer

HackerFeeds does not engage in the exfiltration, downloading, taking, hosting, viewing, reposting, or disclosure of any stolen information. All breach data reported here is sourced from publicly available threat intelligence feeds for awareness purposes only.