Science & Tech · Cybersecurity · 23 hrs ago
Cyberattack exposed data at Brenner Tunnel project company
Unknown attackers accessed data held by the Brenner tunnel company in a cyberattack in mid-October.
The company, BBT SE, is building a rail tunnel beneath the Alps to connect Austria and Italy.
The attackers reached some data that was accessible through the internet, but a company spokesperson said highly sensitive data was not affected.
The attack poses no known risk to construction or future operations, and Italian authorities are investigating because the company is based in Bolzano.
The tunnel is a major European infrastructure project expected to cost 11.7 billion euros and measure 64 kilometres.
The project is scheduled to open from 2034, with the tunnel expected to shorten rail journeys between Germany and Italy; the company says the work is not at risk from the attack.
The company building the Brenner Base Tunnel said unknown attackers accessed parts of data reachable from the internet.
The cyberattack took place in mid-October, and the company said it posed no danger to construction or the tunnel’s future operation.
Highly sensitive data was not affected, according to a company spokesperson.
Italian authorities are investigating the incident because the company is based in Bolzano.
The 64-kilometre tunnel is expected to begin operating from 2034 and is estimated to cost €11.7 billion.
- Who
- Unknown attackers accessed data held by BBT SE, the company building the tunnel.
- What
- A cyberattack gave attackers access to parts of data reachable from the internet. The company said highly sensitive data was not affected.
- When
- Mid-October 2026. ANSA reported that the intrusion occurred on 17 October.
- Where
- BBT SE’s systems; the company is based in Bolzano, Italy.
- Why
- Not stated.
This story does not have two clearly opposing sides.
Attackers accessed parts of BBT SE data reachable from the internet.
ANSA reported that the intrusion occurred and that initial countermeasures and investigations began.
Reports on the attack were published by the cited outlets.
- Company
- BBT SE
- Tunnel length
- 64 kilometres
- Attack timing
- Mid-October 2026; ANSA gives 17 October
- Data accessed
- Parts of data reachable from the internet
- Sensitive data
- Not affected, according to a company spokesperson
- Estimated cost and opening
- €11.7 billion; expected to begin operating from 2034
4 sources
What people are saying
As soon as the incident was detected, we activated cybersecurity protocols, promptly isolating the affected systems and enlisting external cybersecurity specialists to carry out the necessary forensic analysis.