Privacy Unpacked

Confirmed breach

BBT SE data breach

ATAustria

tirol.ORF.at, la Repubblica and Südtirol News reported a data breach at BBT SE (Austria) on 6 November 2026, and it has been confirmed.

People affected
Not reportedno count given yet
Reported
6 November 2026News report and 2 more
Who is affected
Italy

What was exposed 5

  • Internet-accessible data
  • Technical documents
  • Administrative documents
  • Tender documents
  • Survey data

How it happened

How
Hacking Hacker attack source
Our translation from GermanHacker-Angriffs
Attacker
Everest Behind the attack could be the Russian-speaking group "Everest". source · All its claims, counted →
Our translation from GermanHinter dem Angriff könnte die russischsprachige Gruppe „Everest" stehen.
From
Russia, according to ZeroFox Russian-speaking group "Everest" source
Our translation from Germanrussischsprachige Gruppe „Everest"

Sources 3

News reports are read by an AI model; every fact taken from an article was checked word for word against it, and anything it could not find was dropped. · Corrections and changes

Questions about the BBT SE breach

Was BBT SE hacked?

tirol.ORF.at, la Repubblica and Südtirol News reported a data breach at BBT SE (Austria) on 6 November 2026, and it has been confirmed. How it happened, by the sources: hacking.

What data was exposed in the BBT SE breach?

Internet-accessible data, Technical documents, Administrative documents, Tender documents and Survey data, by the notices and reports on this page.

How do I know if I was affected?

Organisations normally tell the people whose data was involved, by letter or email, and that notice says what of yours was in it. We cannot look up individual people. If you got a notice, check that it is real, then follow the steps on this page.

Is there a BBT SE data breach settlement?

No settlement open for claims is on record for BBT SE as of 15 November 2026. Every open settlement is listed with its deadline.

Is a letter, email or text about the BBT SE breach real or a scam?

A real notice names the breach, says what data was involved and never asks for a password, a code or a payment. Criminals often send fake notices after a breach is in the news. Do not use links or phone numbers in the message: go to BBT SE’s own site, or check the letter here.

More breaches in Austria

  1. Casinos AustriareportedATAustria · 7 November 2026 Email addressesNamesPurchase details+1 150Kcustomers
  2. FeratelreportedATAustria · 30 October 2026 Email addressesNamesAddresses+3 –not reported

Every breach in Austria →

From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Official registers · Corrections and changes · Accuracy audit · For journalists · Found a mistake? Tell us and we correct it.