Skip to main content
Back to Situations
activeCyberJustice

Italy: Antimafia Directorate Cyberattack and Data Exfiltration

Italy's Antimafia Investigation Directorate (DIA) has been targeted by a cyberattack, with claims of 220MB of sensitive data exfiltrated by a hacker demanding ransom.

AI disclosure: Model-written assessment of the linked reports, not a verified fact. Check the sources. How Mosaic works

Reported1 of 7 key facts linked
Not measuredno reporting-volume measure is served for situations
Not assessedno severity is rated for situations
4 publishers4 reports

: Escalating (the model's assessment, not a measurement)

Nov 9First seen Nov 9Assessment written Nov 10
Why now
Newest report Nov 9: Italy: Cyberattack on DIA Mafia Investigation Directorate; Data Theft Denied (ERT News).from the newest member report, published 9 Nov 14:50 UTC
Why it matters
This incident raises significant concerns regarding the compromise of sensitive law enforcement intelligence on organized crime and the overall cybersecurity posture of Italian state institutions.
Affected
Italy (lead), Russia, Ukrainecountries named in the evidence; the lead is the country it is filed under, not an event location
Next catalyst
No scheduled catalyst known.Mosaic holds a schedule only for economic-calendar releases; 3 indicators to watch below
Watch in Monitor Export brief

Save keeps it in Monitor › Saved, without alerts. Watch opens Monitor with “Italian Cyberattack” as the subject.

Known and unknown

key facts by their own evidence status

Known

  • ReportedTheft of files on criminal groups from the DIA has been denounced.

Not established

  • Italy's Antimafia Investigation Directorate (DIA) was targeted by a cyberattack.
  • A National Committee for Public Order and Security meeting is scheduled due to the incident.
  • 220MB of data was exfiltrated by a hacker ('weykofa') demanding a Bitcoin ransom.
  • DIA officials initially stated hackers were unable to remove sensitive data.
  • The precise extent of data exfiltration and compromise.
  • The identity and affiliation of the perpetrator(s).

stated, not yet supported by linked evidence

Indicators to watch

  • →Official statements from the National Committee for Public Order and Security.
  • →Further details on the type and sensitivity of exfiltrated data.
  • →Identification or attribution of the cyberattack perpetrator(s).

what would change the read; not a schedule

Evidence

Reported · 4 reports · 4 distinct outlets

Central claim Italy's Antimafia Directorate hit by file theft; security committee to meet

4 reports, newest first. Each time is when the report was published, or when Mosaic recorded it if no publication time was given; event times are not recorded. Several outlets can carry one story, so a number of reports is not independent confirmation.

  1. published
    Italy: Cyberattack on DIA Mafia Investigation Directorate; Data Theft DeniedERT News · Reported
  2. published
    Italy's Antimafia Directorate hit by file theft; security committee to meetLa Vanguardia · Reported
  3. published
    Italy's Dia hit by suspected ransomware; 220MB data stolen, ransom demandedANSA · Reported
  4. published
    Italy FM cyberattack: Meloni blames Russia over Ukraine stancePerfil · Reported · Context · does not support the central claim

Connected

named in this situation's reports; not a claim that one causes another

Other situations in Italy

Loading…

Actors

Loading…

Places

Anomalies

Loading…

Assessment

model confidence: under Technical details
Read the full assessment

Italy's Antimafia Investigation Directorate (DIA) has been targeted by a cyberattack, with claims of 220MB of sensitive data exfiltrated by a hacker demanding ransom. While initial reports of data theft were denied by DIA officials, subsequent reporting indicates a file theft has been denounced, prompting a national security committee meeting. The full extent of data compromise and perpetrator identity remain unclear.

AI disclosure: Model-written assessment of the linked reports, not a verified fact. Check the sources. How Mosaic works

Topics antimafia · italy · data-breach · law-enforcement · intelligence · cyberattack · ransomware · data breach · law enforcement · russia · ukraine · meloni

Technical details
Impact score
5.7 / 10 · a priority score, not confidence
Model confidence
Medium: evidence reported (1 of 7 key facts linked to evidence; the model marked a key fact as unclear); 4 distinct outlets
Coverage focus
75% in primary evidence group
Coherence
0.86
Review state
published
Refreshed
Updated Nov 10, synthesized Nov 10. Not evidence time.
Cluster type
story
Member signals
4
Situation id
fa9bcec9-f624-488a-88d1-83e8d318fe79
Last evidenceNov 9, 15:22 UTC
Last successful evaluationSuccessful evaluation timestamp unavailable (legacy)
Last attempt·

Public comments

…

Anyone who opens this situation can read these comments, with the author's display name. They are not private notes.

Sign in to post a public comment, contribute a source, or challenge the assessment.