Cyberattacks on Italy – A growing concern

CRIL observed a rising wave of cyberattacks targeting Italian companies and public entities in 2022, documenting major data leaks (including BidenCash card dumps, a 900 GB automotive supplier leak, MBDA/Ministry of Defense data, and a large Vodafone Italia disclosure), a measured increase in ransomware targeting Italy, and thousands of exposed instances of critical vulnerabilities (notably CVE-2022-32548 in DrayTek, CVE-2022-40684 in Forti products, and Microsoft Exchange CVEs). The report emphasizes underground forum activity—sale/auction of stolen data and exploits—and highlights supply-chain and third-party risk that amplify the impact on broader value chains.