Italy — Cyber Threat Profile
The National Cybersecurity Agency (ACN) spearheads Italy's defense, focusing on the "National Cybersecurity Perimeter" and the full enforcement of the NIS2 Directive. Italian strategy prioritizes protecting the "Made in Italy" industrial sector from intellectual property theft and securing critical public administration data via the National Strategic Cloud (PSN). The ACN has implemented strict supply-chain vetting for 5G and essential services to mitigate geopolitical risks. Current efforts address the digital skills gap and the deployment of AI-driven threat detection to counter state-sponsored disinformation and ransomware targeting the healthcare system. Italy's posture reflects a shift toward proactive, centralized national cyber-resilience.- National CERT/CSIRT: CSIRT-IT
- Data protection authority: Garante per la protezione dei dati personali (source: CNIL)
- World Cybercrime Index 2024 (origin significance): 0.80 / 100, #35 worldwide
- Secure Internet servers per 1M people (2024): 30,647.2 (source: World Bank)
- Internet users (2024): 89.2% of population (source: World Bank)
Latest Italy coverage
- Fake state fine notices dominate Italy's phishing week 2026-08-14 · Cyber Incidents
- Phishing kit uses AI to check the IDs it steals from you 2026-08-14 · AI Security
- Ransomware crews pile onto Italy's industrial firms 2026-08-13 · Cyber Incidents
Threat actors targeting Italy
- APT28 APT
- APT41 APT
- Killnet Hacktivist
- NoName057(16) Hacktivist
- Qilin Ransomware · 59 incident(s)
- LockBit Ransomware · 43 incident(s)
- Akira Ransomware · 31 incident(s)
- RansomHub Ransomware · 27 incident(s)
- The Gentlemen Ransomware · 20 incident(s)
- DragonForce Ransomware · 18 incident(s)
- SafePay Ransomware · 15 incident(s)
- Sarcoma Ransomware · 15 incident(s)
- 8Base Ransomware · 13 incident(s)
- Cl0p Ransomware · 11 incident(s)
- INC Ransom Ransomware · 11 incident(s)
- Deadlock Ransomware · 10 incident(s)
- Medusa Ransomware Ransomware · 10 incident(s)
- Black Basta Ransomware · 8 incident(s)
- Lynx Ransomware Ransomware · 8 incident(s)
- Hunters International Ransomware · 7 incident(s)
- NightSpire Ransomware · 7 incident(s)
- Space Bears Ransomware · 7 incident(s)
- Meow Ransomware · 6 incident(s)
- Stormous Hacktivist · 5 incident(s)
- Fog Ransomware Ransomware · 4 incident(s)
- FunkSec Ransomware · 4 incident(s)
- Nova Ransomware · 4 incident(s)
- BlackSuit Ransomware · 3 incident(s)
- Cactus Ransomware · 3 incident(s)
- Coinbase Cartel Ransomware · 3 incident(s)
- Krybit Ransomware · 3 incident(s)
- RansomHouse Ransomware · 3 incident(s)
- Rhysida Ransomware · 3 incident(s)
- BianLian Ransomware · 2 incident(s)
- BlackNevas Ransomware · 2 incident(s)
- BravoX Ransomware · 2 incident(s)
- Everest Ransomware · 2 incident(s)
- Lamashtu Ransomware · 2 incident(s)
- M3rx Ransomware · 2 incident(s)
- Majinahanashi Ransomware · 2 incident(s)
Most targeted sectors
- Manufacturing 68 incident(s)
- Business & Professional Services 45 incident(s)
- Technology 43 incident(s)
- Agriculture & Food 28 incident(s)
- Retail & Consumer 18 incident(s)
- Transportation & Logistics 14 incident(s)
- Healthcare 11 incident(s)
- Construction 9 incident(s)
- Hospitality & Tourism 9 incident(s)
- Education & Research 7 incident(s)
- Energy & Utilities 6 incident(s)
- Government & Public Sector 4 incident(s)
Recent claimed incidents
- Doimo Cucine 2026-08-17 · Manufacturing
- Loescher editore Torino 2026-08-16 · Education
- Zanichelli 2026-08-16 · Education
- Mulino Padano 2026-08-16 · Agriculture and Food Production
- agricolagalbusera.it 2026-08-16 · Agriculture and Food Production
- Coface 2026-08-16 · Financial Services
- ASCOM S.p.A. ascom-italy.it serviced by an IT company Emilcom S.r.l. 2026-08-14 · Manufacturing
- IPS 2026-08-14
- Acli 2026-08-14
- FERRARI MANGIMI SRL 2026-08-14 · Agriculture and Food Production
- Basso Fedele & Figli S.r.l. (Olio Basso) / Villa Raiano 2026-08-12 · Agriculture and Food Production
- ECCELLENT.COM 2026-08-12 · Other
- STNET.IT 2026-08-12 · Technology
- NUOVACMM.COM 2026-08-12 · Other
- CDA 2026-08-12