RENFE cyberattack via ADIF compromise exposes user data

Spanish state railway RENFE reported a cyberattack that accessed limited user data (names, email addresses), originating from previously compromised ADIF servers connected to RENFE systems. The breach is confirmed by RENFE, but the full scope and perpetrator remain unclear. This highlights supply-chain vulnerabilities in critical European transport infrastructure.