Everest Group Interview on Collins Aerospace Breach — Daily Dark Web

The Everest Group has given an interview on Daily Dark Web about the Collins Aerospace breach, published on 7 November 2025, with DataBreaches[.]Net summarising the discussion. According to DataBreaches[.]Net, Collins’ parent company RTX described the incident as a ransomware attack, but Everest disputes this by saying there was no encryption involved.

Everest, which was initially named the “Everest Ransomware Group,” now states that their focus is on exfiltrating data and extorting organisations to pay to delete or not leak it. The article notes that some threat actors object to describing their methods as “extortion” rather than “ransom,” but that “extortion” is applicable.

Everest asserts they did not encrypt any files, had no involvement with HardBit ransomware, and were not connected with an individual who was arrested, while also making specific accusations against Collins/RTX that DataBreaches is not repeating.