Italy
Primarily a target
—
6 received·
0 initiated·
2 responses
·EU · NATO
In the last 60 days, 6 new cyber operations involving Italy were added to the database: a 33% decrease compared to the previous period. The number of operations is currently 22% below the long-term 60-day average. The Intensity of cyber operations involving Italy over the last 60 days is rising to 4.5, compared with 2.2 in the preceding 60-day period. This is above the all-time average for Italy of 2.6.
Maintained by EuRepoC research analysts · updated 16 Oct 2026
For last 60 days, this country appears chiefly as a target — 6 incidents directed at it, 0 it is linked to initiating.
Source: EuRepoC Global Database as of 16 Oct 2026.
01 / 02
6 incidents · as targetCyber activity
Incidents directed at Italy targets, and the responses they drew.
Cyber incident intensity
Mean3.8/15Moderate
Range 3.0–5.0
Drag the ends of the observed range to narrow intensities.
5 coded incidents · Last 60 days
Database additions by weekincidents against Italy
Bar height shows incidents added during last 60 days; select a bar to filter this interval; hover for average intensity.
Most-targeted sectorswhat gets hit
SectorIncidentsIntensityResponded
Civil service / administration
2.7Moderate
0/3
Government / ministries
1.5Moderate
0/2
Education
3.0Moderate
0/2
Defence industry
0.0Moderate
0/1
Energy
0.0Moderate
0/1
Telecommunications
0.0Moderate
0/1
End user(s) / specially protected groups
4.0Moderate
0/1
Health
4.0Moderate
1/1
Civil service / administration is the most-targeted sector — 3 of 6 incidents, 0 answered.
By originwho is behind activity against it
02 / 02
Incidents received & responses
Unknown
Italy
·Civil service / administration
Unknown Actors Breached The Municipality Of Lomazzo In Italy Between 26 And 28 September 2026
26 Sep 2026
Incident · Unattributed
26 Sep 2026
Unknown
Italy
·Civil service / administration
Unknown Actors Breached The Municipality Of Lomazzo In Italy Between 26 And 28 September 2026
AUUSJPDE4 statesjoint
WaterPlum
Four International Partners Published Joint Security Advisory on North Korean Cyber Activities on 18 September 2026
Official policy
18 Sep 2026
Official policy
18 Sep 2026
AUUSJPDE4 states
WaterPlum
Four International Partners Published Joint Security Advisory on North Korean Cyber Activities on 18 September 2026
INC Ransom
Italy
·Health
INC Ransom Carried Out Ransomware Attack Against Salus Polyclinic in Italy From 31 August to 3 September 2026
31 Aug 2026
Incident · Low severity
31 Aug 2026
INC Ransom
Italy
·Health
INC Ransom Carried Out Ransomware Attack Against Salus Polyclinic in Italy From 31 August to 3 September 2026
USFederal Bureau of Investigation
Mabna Institute
US Department of Justice Charged 17 Iranians with Cyber Theft on behalf of the Islamic Revolutionary Guard Corps on 18 August 2026
Criminal proceedings
18 Aug 2026
Criminal proceedings
18 Aug 2026
USFederal Bureau of Investigation
Mabna Institute
US Department of Justice Charged 17 Iranians with Cyber Theft on behalf of the Islamic Revolutionary Guard Corps on 18 August 2026
xpl0itrs
Italy
·Digital Provider +1
Cybercriminal Group Xpl0itrs Claimed Theft of 6.1 TB of Data from School Software Provider Spaggiari Parma in Italy Between 30 June and 20 August 2026
30 Jun 2026
Incident · Low severity
30 Jun 2026
xpl0itrs
Italy
·Digital Provider +1
Cybercriminal Group Xpl0itrs Claimed Theft of 6.1 TB of Data from School Software Provider Spaggiari Parma in Italy Between 30 June and 20 August 2026
WaterPlum (313 General Bureau of the Munitions Industry Department)
ADAEAFAL+185189 countries
·End user(s) / specially protected groups
North Korea's WaterPlum aka Contagious Interview Infected at Least 30,000 Devices of IT Professionals in Over 100 Countries from December 2025 to July 2026
1 Dec 2025
Incident · Low severity
1 Dec 2025
WaterPlum (313 General Bureau of the Munitions Industry Department)
ADAEAFAL+185189 countries
·End user(s) / specially protected groups
North Korea's WaterPlum aka Contagious Interview Infected at Least 30,000 Devices of IT Professionals in Over 100 Countries from December 2025 to July 2026
MuddyWater (MOIS)
ADAEAFAL+185189 countries
·Civil service / administration +4
Iranian State-Sponsored Hacking Group MuddyWater Conducted Espionage Against Government and Private-Sector Organisations in Asia, Africa, Europe and North America Since 2018
1 Jan 2018
Incident
1 Jan 2018
MuddyWater (MOIS)
ADAEAFAL+185189 countries
·Civil service / administration +4
Iranian State-Sponsored Hacking Group MuddyWater Conducted Espionage Against Government and Private-Sector Organisations in Asia, Africa, Europe and North America Since 2018
COBALT DICKENS (Mabna Institute)
USADAEAF+185189 countries
·Civil service / administration +5
Iranian State-Sponsored Hacking Group Mabna Institute Stole Academic Data from Universities and Companies Worldwide Around 2013
1 Jan 2013
Incident · Low severity
1 Jan 2013
COBALT DICKENS (Mabna Institute)
USADAEAF+185189 countries
·Civil service / administration +5
Iranian State-Sponsored Hacking Group Mabna Institute Stole Academic Data from Universities and Companies Worldwide Around 2013
Showing the 8 most recent of 8
Open all in advanced search