CO-VER Power Technology SpA Listed by everest Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On 7 December 2024, the ransomware group known as everest listed CO-VER Power Technology SpA on its leak site, claiming to have stolen 800 GB of internal files in a ransomware attack. Public detail remains limited: the number of people affected is unknown, and no independent confirmation of the intrusion or the data volume has been released. The listing includes a demand that a company representative contact the group before a deadline expires, along with a reference to the organisation’s website.

For an Italian firm operating in power technology, any confirmed exfiltration of internal material raises practical questions about operational continuity, supply-chain trust and the possible exposure of business or employee records. What is known so far rests entirely on the group’s unverified claim.

Breaking down the breach

According to the everest listing dated 7 December 2024, CO-VER Power Technology SpA suffered a ransomware attack in which internal files were exfiltrated. The group states that the total volume of stolen data is 800 GB and instructs a company representative to make contact before time runs out. No further technical details—such as the initial access vector, the ransomware variant used, the precise date of the intrusion, or any ransom demand amount—have been disclosed in the public record. The number of individuals whose data may be involved is also unknown. At present the incident is known only through the group’s own claim; no statement from CO-VER Power Technology SpA confirming or denying the event has been incorporated into the available facts.

The group behind it: everest

Everest is a ransomware operation that follows the now-common double-extortion model: it encrypts systems and simultaneously steals data, then threatens to publish the material on a dedicated leak site if payment is not made. The group typically posts victim names, claimed data volumes and countdown timers, and it has previously targeted organisations across manufacturing, technology and industrial sectors. Its listings are public claims rather than verified forensic findings; victims sometimes negotiate, sometimes ignore the posts, and sometimes confirm breaches only after independent investigation. In this case the group claims to hold 800 GB of CO-VER Power Technology SpA’s internal files and has set a contact deadline, but no additional statements specific to this victim beyond the listing itself have been recorded.

Who is CO-VER Power Technology SpA?

CO-VER Power Technology SpA is an Italian company active in the power-technology sector. Organisations of this type design, manufacture or supply equipment and systems related to energy generation, conversion or distribution. They routinely hold engineering drawings, supplier contracts, employee records, customer project data and internal operational documents. A breach at such a firm can affect not only the company itself but also partners in the energy supply chain and any individuals whose personal or professional information appears in the stolen material. The potential consequences therefore extend beyond the organisation’s own walls to the wider industrial ecosystem it serves.

The information in question

The everest listing describes the exposed material simply as “internal files” totalling 800 GB. No further breakdown—such as whether the files include personal data, financial records, intellectual property or operational schematics—has been provided. Organisations in the power-technology sector typically maintain a mix of technical documentation, commercial correspondence, human-resources files and system configurations. Because the exact contents remain unconfirmed, it is not possible to state with certainty which categories of data, if any, have left the company’s control. The 800 GB figure and the characterisation as internal files are claims made by the group and have not been independently verified in the public record.

Why it matters

If the claimed exfiltration is accurate, the primary risks are twofold. For the organisation, loss of proprietary engineering or commercial information can undermine competitive position, disrupt operations and trigger regulatory scrutiny under European data-protection rules. For any individuals whose details appear in the files—employees, contractors or clients—the exposure could lead to phishing, identity misuse or unwanted contact. Even when the precise data types are unknown, the sheer volume cited (800 GB) suggests a substantial archive that could contain sensitive material. Until the company or independent investigators provide clarity, those potentially affected must treat the risk as real while recognising that the full picture is still incomplete.

What to do if you're exposed

Anyone who has worked with or for CO-VER Power Technology SpA, or who suspects their information may have been among the internal files, can take a few immediate, practical steps:

• Monitor bank and credit accounts for unexpected activity and enable transaction alerts where available.
• Change passwords on any accounts that may have shared credentials with company systems, and enable multi-factor authentication.
• Treat unsolicited emails, calls or messages that reference the company or the breach with caution; verify requests through known official channels.
• Request a free credit report or fraud alert from the relevant national consumer-protection or credit agency if personal identifiers are believed to be involved.
• Run a free exposure scan of your email address against known breach datasets to check whether your information has already appeared in public dumps.

These measures do not confirm or deny involvement in this specific incident, but they reduce the chance that any leaked material can be used against you while further details remain limited.

AICompiled with AI assistance from public sources and published under our editorial standards.