The Revolut affair has sparked much debate amongst analysts and those following the story. As some have noted, however, at the heart of the problem lies a concept of ‘misplaced
On 31 August, Policlinico Triestino S.p.A., which comprises several healthcare facilities, suffered a data breach perpetrated by the INCRansom group. Given the seriousness of the incident, the type of organisation
As we do every year, before the summer break, it is worth briefly summarising the most significant events of the past few months.
There was a data breach against an adult-only club in the city of Naples, which was claimed by one of the most notorious cybercriminal collectives.
Digital healthcare is still an absolutely critical element, also due to a non-federalised and heterogeneous organisation between regions. It is often the patients who suffer, but sometimes also the doctors.
The relationship between data breach and the supply chain is often underestimated despite the fact that, for more than a decade, best practices have established useful methods and approaches to
On 19 December 2024, the National Cybersecurity Agency (NCA) published a document entitled‘Ransomware. Characteristics, preparation and response to ransomware attacks‘ with the aim of defining good practice for managing and
This summer was characterised by a number of quite interesting data breaches, including those against some Italian hotels.
The Sylhet Gang collective (also SG) has been involved in numerous cyber offensives such as the famous #OpIsrael and the even more famous #OpFreePalestine. It has very clear pro-Palestinian connotations
This is a fact sheet on the collective called Mr Hamza, which has been involved in numerous cyber attacks, including in collaboration with DieNet, discussed here.
The Municipality of Pisa was subject to a data breach by the NOVA collective. Let us try to understand what happened and the consequences of this action.
The European Union has an IT incident analysis tool called CIRAS. Let’s take a look at this not always well known tool.
AIAD is the Federation, member of Confindustria, representing Italian Aerospace, Defence and Security Companies.
The company INPS Servizi S.p.A. was the subject of a data breach by the LYNX collective, with data exfiltration and interruption of services. Let’s find out more.
The newsletter of the Garante per la Protezione dei Dati Personali (Italian Data Protection Authority) publicises as news measure No. 572 of 4 July 2024 concerning the data breach suffered
The idea that hackers only target the most industrially powerful countries is wrong; certainly the United States, China, Europe, are constantly at the centre of cyber attacks, but there are
On 26 July 2024, the Agency for National Cybersecurity (ACN) published the ‘Guide to Reporting Incidents to CSIRT Italy’. It is a 56-page document that gathers some interesting information that
The Everest Group hit a notary firm and this data breach is likely to have truly dramatic connotations considering the type of target and the amount of data exfiltrated. Let
In Italy, there is a major problem in restoring health services following a computer incident, and it matters little whether the incident is caused by negligence or malicious intent. In
Another data breach to the detriment of public health has hit the Lombardy region, this time it is the turn of ASST Rhodense, let’s try to understand what happened.
On 24 May, the final event of the Mastercourse 2024 organised by ANORC took place in Milan: the event is called MEDDLE. On that occasion, I had the opportunity to
As many will know, in April the Synlab facility was attacked by the BlackBasta collective. Among the data exfiltrated, in addition to identity documents and internal information on the facility,
Apart from the legal obligations in the event of a data breach and thus the notification to be made to the Data Protection Authority, it is necessary to understand how
It has now been a few days since the Banca Sella data breach, and it is time to make a few remarks about what happened, outside of any controversy but
On the portal of the Garante per la Potezione dei Dati Personali (Italian Data Protection Authority), the measures against the Lazio Region, the company LazioCrea S.p.A. and ASL Roma 3
What happened to Westpole S.p.A. Let’s try to summarise the events, but above all, let’s try to better understand who Westpole S.p.A. is.
On 10 October 2023, the NoEscape collective claimed an attack against the Order of Psychologists of Lombardy. The attack threatened to expose particular category data related to the Order’s activities.
In May 2023, there was a data breach that few noticed: the one against the data of Metronotte Piacenza, a private security company. On the surface, this attack was less
On 15 August 2023, the Medusa Group published a ransom note on its website demanding payment of $500,000 from Postel SpA for not publishing the data. At the time of
Multimedica is an Italian company responsible for the healthcare activities carried out in facilities such as the San Giuseppe Hospital in Milan and the Irccs Multimedica in Sesto San Giovanni.
