Alstom Transport SA is a €4.46 billion French rail equipment subsidiary whose production and digital control systems underpin passenger and freight rail. Public evidence establishes its legal identity, scale from filed accounts, and AS397025 routing context; direct linkage to rail operational technology is not proven. Watch for BGP prefix changes, regulatory cybersecurity actions, and corporate delivery disclosures.

Alstom Transport SA

Alstom Transport SA is a French rail-engineering subsidiary of Alstom SA, with over €4.4 billion in net revenue and more than 10,000 employees. It designs and services rolling stock and signalling systems for urban and mainline rail, and holds AS397025, offering a limited but observable internet routing presence that can signal organizational change.

Why It Matters

Disruptions to Alstom Transport SA's manufacturing or digital systems could cascade into rail network capacity shortfalls. Changes in its internet routing footprint, though limited, might prefigure broader IT or operational shifts that affect service reliability. Rail is designated critical infrastructure, and the company's own systems integrate digital control with physical safety.

What Public Sources Show

Alstom Transport SA is a French rail-engineering anchor with a revenue footprint of over €4.4 billion and thousands of employees. It designs and maintains the rolling stock, signalling, and digital control systems that keep France’s trains moving. This operational scale makes its production continuity and digital resilience a matter of national transport interest.

The company operates within the Alstom group, which booked €27.6 billion in orders and held a €104 billion backlog as of March 2026. In France alone, the group employs more than 13,000 people across 14 sites. Alstom Transport SA is the legal entity tied to AS397025, a small autonomous system in the RIPE region.

AS397025 announces two IPv4 /24 prefixes totaling 512 addresses. That footprint is modest, but it provides a passive, externally visible signal. Changes in BGP announcements, prefix withdrawals, or registry alterations can serve as early indicators of network reorganization or IT strategy shifts.

Rail is treated as critical infrastructure, and Alstom publicly warns that cybersecurity must span onboard, trackside, and passenger-facing systems. The company’s deployment of communication-based train control on Paris Metro Line 8 underscores how deeply digital control is embedded in modern rail operations.

What remains uncertain is the direct link between AS397025 and rail operational technology. Public records do not reveal what applications or services are hosted on those prefixes. The ASN might serve back-office or corporate functions rather than signalling or control networks. Without further evidence, the routing channel is a supporting signal, not proof of exposure.

Readers tracking transport resilience should watch for material changes in Alstom Transport SA’s internet footprint. New prefix announcements, a shift in upstream connectivity, or altered registry details could precede broader organisational or operational adjustments. Corporate filings and cybersecurity advisories will remain the primary windows into the company’s delivery and risk posture.

Operating Surface

Alstom Transport SA designs, builds, and services railway rolling stock and signalling systems for France's rail operators. It operates 17 active establishments and employs over 10,000 people. The company is a subsidiary of Alstom SA and holds autonomous system AS397025, which announces two IPv4 /24 prefixes, providing a passive signal of network or organizational changes.

The company's scale and centrality to European rail operations make its production continuity and cybersecurity posture material to transport resilience. Its public ASN and IP prefixes offer an independent, passive signal of organizational or network shifts. Regulatory focus on rail cybersecurity amplifies the consequences of any digital disruption that could affect service reliability.

Watchpoints

Alstom Transport SA is a structurally important rail-industry player whose operational health and cybersecurity posture are under-monitored in public internet discourse. Its limited ASN footprint provides a rare passive signal that, while not conclusive, can be combined with financial and regulatory data to anticipate changes in transport resilience. The tax integration with Alstom SA ties its fortunes to the broader group's backlog and project execution risk.

Watch for new prefix announcements or route changes from AS397025, as those may indicate network expansion or consolidation. Monitor Alstom SA's quarterly and annual filings for any mention of Alstom Transport SA revenue declines, contract delays, or restructuring. Track ANSSI or EU rail cybersecurity advisories that name Alstom or its suppliers.

Public evidence does not show what services or operational technology are hosted on AS397025, limiting its value as a direct risk indicator. No active prefix sample is in the current dataset, so routing claims depend on static registry records. The company's specific customer contracts and their dependency structures are not publicly available, making it hard to quantify cascade effects.

Sources

• Registry RDAP / WHOIS record - public-source identity and registry context for Alstom Transport SA.
• data.inpi.fr - The French RNE extract identifies ALSTOM TRANSPORT SA, SIREN 389 191 982, as a société anonyme à conseil d'administration, with APE 3020Z for construction of railway locomotives and rolling stock, capital of 2,292,040,800 euros and registered office at 48 rue Albert Dhalenne, Saint-Ouen-sur-Seine.
• annuaire-entreprises.data.gouv.fr - The French public business directory reports ALSTOM TRANSPORT SA as active, created in public records, operating in construction of railway locomotives and rolling stock, with 10,000 or more employees in 2023 and 41 establishments including 17 active establishments.
• pappers.fr - The 2025 filed accounts state that Alstom Transport SA sells rail-transport equipment and services, recognizes long-term contract revenue by progress, reported 4.462 billion euros of net revenue for the year ended 31 March 2025, and is in an Alstom SA tax integration group.
• alstom.com - Alstom’s official company page describes the broader group as a pure rail leader providing trains, signalling, infrastructure, digital rail, services and turnkey systems, present in 63 countries with more than 86,000 employees and more than 150,000 vehicles in operation.
• alstom.com - Alstom’s France page says Alstom develops and markets systems, equipment and services for urban and main-line rail in France, with more than 13,000 employees and 14 sites in the country.
• alstom.com - Alstom’s FY 2025/26 management report reports 27.628 billion euros of orders received, 19.171 billion euros of sales and 104.412 billion euros of backlog for the broader group at 31 March 2026.
• ipinfo.io - IPinfo lists AS397025 as Alstom Transport SA in France, with registry RIPE, two IPv4 ranges totaling 512 IPv4 addresses, no IPv6 addresses and visible upstream and peer data.
• radar.cloudflare.com - Cloudflare Radar lists AS397025 as Alstom in France and provides a public view of BGP announcements, announced address space, prefixes and connectivity for the ASN.
• alstom.com - Alstom describes rail cybersecurity as a rail-specific control problem involving interconnected onboard, trackside, communications and passenger systems, and says rail is treated as critical infrastructure.
• alstom.com - Alstom’s Paris Metro Line 8 release describes I-CBTC as communication-based train control using continuous communication between train and control center, with safety, cybersecurity and reliability requirements.