REvil is reportedly behind the attack against the Spanish railway manager ADIF and claimed to have stolen over 800 GB of data.
Source: https://cointelegraph.com/news/spanish-railway-infrastructure-threatened-by-ransomware
Spanish Railway Infrastructure Threatened by Ransomware
July 25, 2020
CoinTelegraph