Agenzia delle Entrate

LockBit ransomware gang recently claimed that they breached the network of the Italian Internal Revenue Service (L'Agenzia delle Entrate).

The hackers stole 100 GB of data (including company documents, scans, financial reports, and contracts) which they will release if the agency does not pay the ransom.

The agency asked Sogei who manages its website to investigate the incident.

Source: https://www.bleepingcomputer.com/news/security/lockbit-claims-ransomware-attack-on-italian-tax-agency/

TPRM report: https://www.rankiteo.com/company/agenzia-delle-entrate

"id": "age214828722",
"linkid": "agenzia-delle-entrate",
"type": "Ransomware",
"date": "6/2017",
"severity": "100",
"impact": "6",
"explanation": "Attack threatening the economy of a geographical region"

{'affected_entities': [{'industry': 'Public Administration',
                        'location': 'Italy',
                        'name': "L'Agenzia delle Entrate",
                        'type': 'Government Agency'}],
 'data_breach': {'data_exfiltration': '100 GB',
                 'file_types_exposed': ['Company documents',
                                        'Scans',
                                        'Financial reports',
                                        'Contracts'],
                 'type_of_data_compromised': ['Company documents',
                                              'Scans',
                                              'Financial reports',
                                              'Contracts']},
 'description': 'LockBit ransomware gang recently claimed that they breached '
                'the network of the Italian Internal Revenue Service '
                "(L'Agenzia delle Entrate). The hackers stole 100 GB of data "
                '(including company documents, scans, financial reports, and '
                'contracts) which they will release if the agency does not pay '
                'the ransom. The agency asked Sogei who manages its website to '
                'investigate the incident.',
 'impact': {'data_compromised': ['Company documents',
                                 'Scans',
                                 'Financial reports',
                                 'Contracts']},
 'investigation_status': 'Ongoing',
 'motivation': 'Ransom',
 'ransomware': {'data_exfiltration': '100 GB', 'ransomware_strain': 'LockBit'},
 'response': {'third_party_assistance': ['Sogei']},
 'threat_actor': 'LockBit',
 'title': 'LockBit Ransomware Attack on Italian Internal Revenue Service',
 'type': 'Ransomware'}