Everest ransomware group lists MUSE-INSECURE: Inside Collins Aerospaces Security Failure on its leak site

• Ransomware group: Everest
• Country: United States
• Sector: Technology
• Announcement date: October 17, 2025

Everest claims security failures at Collins Aerospace

The threat group known as Everest has published an announcement claiming security failures at Collins Aerospace. This claim was made via a listing on the group's leak site, where they allege that there are security failures within the organization's infrastructure. The announcement was made on October 17, 2025, and is presented within the context of the group's data leak or access-selling operations.

The details of the claim

According to the announcement posted by the Everest group, the organization is facing significant security challenges. The group alleges that there are security failures within the organization's infrastructure. This type of claim is a common tactic used by ransomware groups operating on leak sites. These groups often use such announcements to pressure organizations into paying ransoms by threatening to release sensitive information or by selling access to the victim's network to other malicious actors.

The group has been active since 2020 and is known for its methods involving data theft and extortion. Such groups typically employ double extortion tactics, where they not only encrypt an organization's data but also steal it, threatening to publish it on public leak sites if their demands are not met. This creates a dual pressure of operational disruption and reputational damage.

The data involved in the incident

The nature of the leaked or threatened data is not specified in the announcement. The provided information does not contain any samples or a list of files related to the incident. The listing names no specific data types.

Potential risks of unauthorized access

While the specific contents of the alleged breach remain unknown, the implications of unauthorized access to a high-tech organization's systems are significant. If unauthorized access has occurred, it could lead to the exposure of sensitive technological data or intellectual property. For organizations in highly specialized industries, the loss of such information can have long-term consequences for competitive advantage and proprietary research.

About Collins Aerospace

Collins Aerospace is a subsidiary of RTX Corporation that manufactures technological solutions, systems, and components for the aerospace and defense industry. The company specializes in aircraft systems, avionics, interiors, and mission systems.

Implications and industry considerations

The claims made by the Everest group may pose a reputational risk to the organization's operational security. Given the sector in which the organization operates, a potential data breach could impact supply chain security and may trigger investigations by relevant regulatory bodies. The aerospace and defense sector is a critical component of global infrastructure, making its security vital to broader national and international interests.

When organizations face such threats, they often must remain vigilant against secondary attacks or targeted phishing attempts. Ransomware groups frequently use the information gathered during an initial breach to launch follow-on campaigns. For companies in the technology and defense sectors, maintaining robust security posture, implementing strict access controls, and monitoring for unusual network activity are standard defensive steps to mitigate the impact of such incidents.

In general, organizations facing these types of threats should focus on incident response protocols and ensuring that their supply chain partners are also aware of the potential risks. The complexity of modern aerospace systems means that a single point of failure in a digital infrastructure can have cascading effects across the entire production and delivery lifecycle.