Postel S.p.A. and the 2023 Data Breach: The Medusa Attack and Sanctions from the Data Protection Authority

In August 2023 Postel S.p.A., a leading Italian postal and digital communications company, was breached after the Medusa cybercriminal group exploited three unresolved Microsoft Exchange Server vulnerabilities, accessing a large volume of sensitive data; the incident culminated in a €900,000 fine from the Italian Data Protection Authority.