Cyberattack on Supeo disrupts DSB passenger train operations across Denmark

A cyber intrusion compromised the software-testing environment of Danish IT supplier Supeo. Subsequent reporting identified cryptocurrency-mining malware on compromised infrastructure. Supeo shut down affected server services, disrupting a software-dependent information system used by Danish railway operator DSB. The loss of access to required driver information caused many DSB trains to stop for approximately four hours on October 29, 2022. DSB was materially affected downstream but was not itself the directly attacked organization; the exact initial compromise date remains uncertain.