Cyber Incident Victim: Università degli Studi della Basilicata
Date:
Feb 2020
Location:
Italy
Summary
The University of Basilicata was among three Italian academic institutions breached by the LulzSec ITA hacktivist collective, which publicly claimed responsibility via Twitter. The group stated the attacks aimed to demonstrate persistent cybersecurity weaknesses in universities, asserting they had targeted such entities for years without repercussions. Their message emphasized the critical need for improved security practices within educational environments to foster better future leadership.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 2 motives | 1 technique |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
On or around February 7, 2020, the Italian hacktivist collective LulzSec ITA conducted cyber intrusions targeting three Italian universities, including the University of Basilicata. The group publicly claimed responsibility for these attacks through a Twitter announcement on February 13, 2020, framing their actions as part of a long-term campaign against academic institutions. LulzSec ITA stated they had spent months identifying vulnerabilities in university systems prior to the breaches. Their operational timeline indicated they had targeted academic entities for approximately nine years prior to this incident, though specific details about the duration of the Basilicata compromise were not disclosed. The collective characterized these attacks as non-random selections, emphasizing deliberate targeting to demonstrate systemic security deficiencies.
The attackers asserted their primary motive was to expose inadequate cybersecurity practices within higher education environments, explicitly addressing students and faculty in their public statement. LulzSec ITA's translated message argued that universities, as training grounds for future leaders, must prioritize security fundamentals to cultivate better governance capabilities. While the collective did not specify the exact data compromised at the University of Basilicata, their broader campaign context suggested unauthorized access to institutional systems. No technical details regarding attack vectors, detection methods, containment procedures, or institutional responses were disclosed in available reporting. The incident highlighted ongoing security challenges within Italian academia, with attackers leveraging public disclosures to amplify their critique of cybersecurity preparedness in educational infrastructure.