Everest ransomware group claims data breach against Speroni S.p.A.

• Ransomware group: Everest
• Country: Italy
• Sector: Manufacturing
• Announcement date: October 7, 2022

Everest ransomware group lists SPERONI S.P.A. on leak site

The Everest ransomware group has listed data allegedly belonging to SPERONI S.P.A. on its leak site. This announcement, which appeared on October 7, 2022, marks a potential significant security incident involving a key player in the industrial manufacturing sector.

Details of the alleged attack

The Everest group published an announcement on October 7, 2022, claiming to have targeted SPERONI S.P.A. According to the group's claims, the attack resulted in the acquisition of sensitive information. However, the group has not provided specific details regarding the total volume of data stolen or the specific number of files involved in the breach.

Furthermore, the group has not issued a specific ransom demand in connection with this particular listing. While the announcement confirms the group's intent to use the stolen information for extortion, the exact financial terms or the specific conditions for the return of the data remain unknown at this time. The listing serves as a claim of successful infiltration and data exfiltration.

Data and affected entities

The Everest group alleges that it has obtained data related to several major automotive manufacturers. The group claims that the information stolen is connected to the following entities:

• Lamborghini
• Ferrari
• Fiat Group
• VAG
• Brembo

Despite these claims regarding the involvement of major automotive brands, there is no screenshot or specific detail available regarding the actual content of the leaked data. The listing does not specify the exact nature of the files, such as whether they are technical blueprints, financial documents, or employee records. The group's claims remain unverified, and further evidence is required to reach a definitive conclusion regarding the validity and scope of these claims.

About SPERONI S.P.A.

Speroni S.p.A. is an Italian-based company that manufactures high-precision tool presetting devices, measuring machines, and tool management solutions for the automotive and industrial sectors. The organization serves as a critical supplier for major automotive manufacturers, including Lamborghini, Ferrari, and Fiat.

Risk assessment and industry implications

These claims may indicate a risk of exposure for the organization's trade secrets and supply chain data. Because SPERONI S.P.A. maintains deep connections to major automotive manufacturers, the breach could pose secondary risks to supply chain security across the broader industry. A compromise at a high-precision manufacturing supplier can potentially create vulnerabilities for the primary manufacturers that rely on their components and technical specifications.

The Everest group is known to employ data exfiltration and extortion methods, which are common in modern ransomware operations. In such scenarios, attackers first penetrate a network to steal sensitive information and then threaten to release it publicly unless a ransom is paid. This