Anonymous Italy
Attribution profile
- Type
- Activist
- Location
- Italy
- Known incidents
- 29 incidents
- Sources
- 12 sources
- First seen
- 2015-05-01
- Last seen
- 2020-07-14
- Updated
- 2026-10-14 06:12
- Aliases
- 2 aliases
STIX characteristics
Threat actor characteristics are available to members.
Profile narrative
Anonymous Italy, also operating as Anonymous Italia and closely linked to the LulzSecITA hacktivist collective, is an Italy‑based threat actor that primarily targets Italian institutions across government, healthcare, education, telecommunications and political sectors. Their activities are consistently framed as efforts to expose institutional security failures, protest governmental or corporate practices, and advocate for improved cybersecurity or policy changes such as a higher minimum wage and mandatory health insurance for temporary workers. Observed tactics include SQL injection against outdated web applications, exploitation of unpatched or poorly defended systems, theft and plaintext disclosure of credentials, data dumps hosted on services like Mega and Pastebin, web site defacement, and occasional DDoS campaigns, with public announcements and leak dissemination often made via Twitter. The group claims affiliation with the broader Anonymous movement and shows no evident state sponsorship or criminal‑consortium ties. Notable campaigns include the #OpSafePharma series targeting healthcare organizations over ADHD‑policy protests, the #NessunDorma operation leaking data from job‑seeking portals, repeated university breaches by LulzSecITA, the 2020 Enac civil aviation authority intrusion, the San Raffaele hospital patient‑data leak, the Lyca Mobile telecom breach, the Partito democratico database exposure, and the release of personal data belonging to retired military personnel. These actions collectively demonstrate a pattern of hacktivist‑driven disruption aimed at highlighting perceived negligence in data protection and prompting institutional reform.
Incidents
Attributed incidents are available to members.
29 incidentsSources
Sources available to members: 12 sources.