COVID-19: Italian vaccination archive sold
An archive containing data on approximately 7.4 million vaccinated Italian citizens has been placed for sale online.
The information offered for sale reportedly contains names, surnames, email addresses, and tax identification codes of the affected individuals. The cybercriminal published sample extracts on a forum to drive interest in purchasing the complete dataset: according to verification by multiple specialized sources and official information, the data was allegedly exfiltrated from regional health authorities (ASL) in Central-Southern Italy.
The anonymous threat actor, in the post announcing the data sale, stated: “I exfiltrated this data over the past month. Some of the vulnerabilities remain open and undisclosed, but are not for sale.”
According to the post author’s claims, the archives contain records on over 7 million users, including 6.5 million unique email addresses and 5.3 million passwords, predominantly protected by encryption. Our Cyber Threat Intelligence tracking confirmed the actor initially identified 150 vulnerable web properties as the attack surface.
The post was completely removed within less than 24 hours, along with the associated forum discussion thread.
A subsequent post from the same user indicated that the data had been sold.
