Skip to main content
Back to Situations
developingJusticeCyber

Italy's Antimafia Directorate Suffers Data Breach, Ransom Demanded

Italy's Antimafia Investigation Directorate (DIA) has experienced a data breach, with 220MB of data reportedly exfiltrated and a ransom demanded by a hacker identified as 'weykofa'.

AI disclosure: Model-written assessment of the linked reports, not a verified fact. Check the sources. How Mosaic works

Reported0 of 7 key facts linked
Not measuredno reporting-volume measure is served for situations
Not assessedno severity is rated for situations
2 publishers2 reports

: Stable (the model's assessment, not a measurement)

Nov 9First seen Nov 9Assessment written Nov 9
Why now
Newest report Nov 9: Italy's Antimafia Directorate hit by file theft; security committee to meet (La Vanguardia).from the newest member report, published 9 Nov 12:04 UTC
Why it matters
This incident exposes sensitive law enforcement data and raises significant concerns about Italy's state cybersecurity posture and the integrity of anti-mafia operations.
Affected
Italy (lead)countries named in the evidence; the lead is the country it is filed under, not an event location
Next catalyst
No scheduled catalyst known.Mosaic holds a schedule only for economic-calendar releases; 3 indicators to watch below
Watch in Monitor Export brief

Save keeps it in Monitor › Saved, without alerts. Watch opens Monitor with “Italian Cyberattack” as the subject.

Known and unknown

key facts by their own evidence status

Known

None of the key facts is established by the evidence yet.

Not established

  • Italy's Antimafia Investigation Directorate (DIA) suffered a data breach.
  • A National Committee for Public Order and Security meeting has been convened regarding the incident.
  • 220MB of data was exfiltrated.
  • A hacker named 'weykofa' is demanding a bitcoin ransom.
  • Interior Minister Piantedosi has downplayed the severity of the incident.
  • The exact extent of the compromised files.
  • The identity and affiliation of the perpetrators.

stated, not yet supported by linked evidence

Indicators to watch

  • →Official statements on the nature and content of the exfiltrated data.
  • →Updates on the ongoing investigation into the perpetrators.
  • →Any public release of the stolen data.

what would change the read; not a schedule

Evidence

Reported · 2 reports · 2 distinct outlets

Central claim Italy's Antimafia Directorate hit by file theft; security committee to meet

2 reports, newest first. Each time is when the report was published, or when Mosaic recorded it if no publication time was given; event times are not recorded. Several outlets can carry one story, so a number of reports is not independent confirmation.

  1. published
    Italy's Antimafia Directorate hit by file theft; security committee to meetLa Vanguardia · Reported
  2. published
    Italy's Dia hit by suspected ransomware; 220MB data stolen, ransom demandedANSA · Reported · Context · does not support the central claim

Connected

named in this situation's reports; not a claim that one causes another

Other situations in Italy

Loading…

Actors

Loading…

Places

Anomalies

Loading…

Assessment

model confidence: under Technical details
Read the full assessment

Italy's Antimafia Investigation Directorate (DIA) has experienced a data breach, with 220MB of data reportedly exfiltrated and a ransom demanded by a hacker identified as 'weykofa'. The incident has prompted a National Committee for Public Order and Security meeting, indicating high-level concern regarding internal security and potential compromise of sensitive intelligence. The full extent of the breach and the perpetrators remain under investigation.

AI disclosure: Model-written assessment of the linked reports, not a verified fact. Check the sources. How Mosaic works

Topics antimafia · italy · data-breach · law-enforcement · intelligence · cyberattack · ransomware · data breach · law enforcement

Technical details
Impact score
5.6 / 10 · a priority score, not confidence
Model confidence
Low: evidence reported (0 of 7 key facts linked to evidence; the model marked a key fact as unclear); 2 distinct outlets
Coverage focus
50% in primary evidence group
Coherence
0.88
Review state
published
Refreshed
Updated Nov 9, synthesized Nov 9. Not evidence time.
Cluster type
story
Member signals
2
Situation id
fa9bcec9-f624-488a-88d1-83e8d318fe79
Last evidenceNov 9, 12:28 UTC
Last successful evaluationSuccessful evaluation timestamp unavailable (legacy)
Last attempt·

Public comments

…

Anyone who opens this situation can read these comments, with the author's display name. They are not private notes.

Sign in to post a public comment, contribute a source, or challenge the assessment.