Gruppo Spaggiari Parma: Hackers claim massive data theft from thousands of students across 3,000 Italian schools

Cybercriminal Group Claims Massive Data Breach at Italian Education Tech Provider

The cybercriminal group xpl0itrs has alleged a major breach of Gruppo Spaggiari Parma, a key technology provider for Italy’s educational system, claiming to have stolen 6.1 TB of data from over 3,000 schools. The breach, reported by threat monitoring platform Hackmanac on Thursday, reportedly includes personal data of students and teachers, medical records, identity details, and contact information.

While the attack has not been independently verified nor have the claimed data volume or categories been confirmed the incident underscores the growing targeting of educational institutions by cybercriminals. Schools and their vendors store vast amounts of sensitive data, much of which retains value for years, making them prime targets.

Gruppo Spaggiari Parma develops digital platforms like ClasseViva, an ecosystem used to manage academic and administrative processes across Italian schools. The concentration of data in such providers means a single breach could impact thousands of institutions, amplifying the risks of digitalization in education.

Beyond grades, schools often hold assessment results, addresses, financial details, disciplinary records, and medical data information that, when combined, enables sophisticated phishing, social engineering, or identity theft. For minors, compromised data can remain exploitable for extended periods, increasing long-term risks. The incident highlights the vulnerabilities of centralized educational platforms and the far-reaching consequences of a single breach.

Source: https://www.escudodigital.com/en/cybersecurity/hackers-claim-massive-data-theft-from-thousands-of-students-across-3000-italian-schools.html

Gruppo Spaggiari Parma cybersecurity rating report: https://www.rankiteo.com/company/spaggiari

"id": "SPA1787560114",
"linkid": "spaggiari",
"type": "Breach",
"date": "8/2026",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 'Over 3,000 schools',
                        'industry': 'Education Technology',
                        'location': 'Italy',
                        'name': 'Gruppo Spaggiari Parma',
                        'type': 'Technology Provider'}],
 'data_breach': {'data_exfiltration': 'Yes',
                 'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personal data of students and '
                                              'teachers',
                                              'Medical records',
                                              'Identity details',
                                              'Contact information',
                                              'Assessment results',
                                              'Addresses',
                                              'Financial details',
                                              'Disciplinary records']},
 'description': 'The cybercriminal group *xpl0itrs* has alleged a major breach '
                'of *Gruppo Spaggiari Parma*, a key technology provider for '
                'Italy’s educational system, claiming to have stolen **6.1 TB '
                'of data** from over **3,000 schools**. The breach reportedly '
                'includes personal data of students and teachers, medical '
                'records, identity details, and contact information. The '
                'attack underscores the growing targeting of educational '
                'institutions by cybercriminals.',
 'impact': {'brand_reputation_impact': 'High',
            'data_compromised': '6.1 TB',
            'identity_theft_risk': 'High'},
 'lessons_learned': 'The incident highlights the vulnerabilities of '
                    'centralized educational platforms and the far-reaching '
                    'consequences of a single breach.',
 'references': [{'source': 'Hackmanac'}],
 'threat_actor': 'xpl0itrs',
 'title': 'Cybercriminal Group Claims Massive Data Breach at Italian Education '
          'Tech Provider',
 'type': 'Data Breach'}