European cyberattacks expand to infrastructure as Italian officials' data leaked online
Pro-Russian cyber operations hit European infrastructure and leak personal data targeting Italian Foreign Minister Antonio Tajani and top officials.
Pro-Russian hacker collectives have expanded cyber operations across Europe, targeting critical infrastructure, public services, and senior Italian officials.
Operations linked to groups including Noname057(16) and Everest recently targeted systems associated with the Brenner Base Tunnel project, travel provider Smartbox, French blood banks, and European supermarket networks. Additionally, confidential personal data belonging to Italian Foreign Minister Antonio Tajani, Rome Chief Prosecutor Francesco Lo Voi, and cyberpolice chief Ivano Gabrielli was published on the dark web alongside financial bounties for further information.
While European intelligence services largely attribute the wave of data breaches, extortion attempts, and false bomb threats to Russian-aligned groups, Italian intelligence sources noted there is no single directing entity behind the multi-front campaign.
Sources: Corriere della Sera, Der Standard, Il Messaggero, Il Sole 24 Ore, La Repubblica.
How outlets assessed this
- Nov 9, 2026, 12:00 AM UTC
- Il Messaggero Skeptical Reported that Italian intelligence doubts a single Russian command structure behind the attacks, raising possibilities of misdirection.
- Il Messaggero Skeptical Emphasizes Italian intelligence doubts over sole Russian responsibility, noting potential misdirection and the absence of a single directing entity.
- Il Messaggero Skeptical Noted Italian intelligence skepticism regarding a unified command, raising the possibility of misdirection tactics alongside the Russian track.
- Il Sole 24 Ore Cautious Focused primarily on the strategic economic threat posed by data theft targeting critical transport infrastructure like the Brenner Tunnel.
- Il Messaggero Skeptical Framed attribution cautiously, highlighting Italian intelligence doubts about a single directing authority and potential misdirection.
- La Repubblica Alarmed Emphasized the broad scale of the pro-Russian cyber campaign targeting critical European transit and commercial infrastructure.
- Il Messaggero Skeptical Highlights Italian intelligence doubts regarding a unified command structure and notes suspicions of potential Ukrainian misdirection.
- Il Sole 24 Ore Cautious Focuses on strategic infrastructure threats, detailing ransomware group Everest's targeting of the Brenner Base Tunnel.
- Corriere della Sera Alarmed Focused on Defence Minister Crosetto's grave warnings that the state is unequipped for hybrid warfare and faces a battle for survival.
- La Repubblica Cautious Emphasized Foreign Minister Tajani's assurances regarding Italy's defensive capabilities while noting upcoming G7 discussions and potential election interference risks.
Sources
- La Repubblica — Il Brennero e Smartbox nel mirino dei filorussi "Rubati dati sensibili”
- Der Standard — Hacker veröffentlichen vertrauliche Daten des italienischen Außenministers
- Il Messaggero — Attacchi hacker, chi c'è dietro? Accuse alla Russia, gli 007 italiani: «Non c?è una sola regia». Il sospetto del depistaggio ucraino
- Corriere della Sera — Attacchi hacker in Europa, chi sono i «Noname» e gli altri gruppi. «Non avete ancora capito come difendervi da noi» |
- Il Sole 24 Ore — La pista dei filorussi di Everest per l’attacco hacker al Brennero
Earlier coverage
- Nov 9, 2026, 01:00 PM UTCItalian officials urge G7 action and stronger defenses following cyberattacks
- Nov 9, 2026, 12:30 PM UTCEuropean infrastructure and Italian officials targeted in cyberattack campaign
- Nov 9, 2026, 08:00 AM UTCEuropean infrastructure and officials targeted in wave of cyberattacks
- Nov 9, 2026, 03:30 AM UTCPro-Russian cyber collectives target key European infrastructure and Italian officials
- Nov 9, 2026, 02:00 AM UTCPro-Russian cyber collectives expand attacks across Europe and target Italian officials
- Nov 8, 2026, 11:30 PM UTCItalian officials warn of escalating hybrid cyber warfare after foreign minister targeted
- Nov 8, 2026, 11:00 PM UTCItalian foreign minister denounces dark web leak as hybrid warfare
- Nov 8, 2026, 10:30 PM UTCItalian foreign minister faces cyber threats amid European breach wave
- Nov 8, 2026, 10:00 PM UTCItalian foreign minister denounces dark web leak as cyberattacks escalate
- Nov 8, 2026, 09:30 PM UTCItalian foreign minister Antonio Tajani targeted in cyberattack alongside key infrastructure