Roman Transportation Consortium

Summary

A cyberattack targeted multiple Italian government institutions, including the Post Police, Transport, and Finance Ministries, with their online portals successfully defending against the intrusion. However, the assault compromised the website of Rome's public transportation operator, though operational services remained unaffected. The incident exclusively disrupted the organization's web presence without impacting physical transit operations or broader infrastructure.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

On March 22, 2023, multiple Italian governmental institutions experienced coordinated cyberattacks targeting their online systems. The assaults impacted web portals operated by the Post Police (Polizia Postale), the Ministry of Transport, and the Ministry of Finance. According to official statements from the Post Police, which holds national responsibility for cybersecurity, these intrusion attempts against the three government entities were successfully neutralized through defensive measures. No operational disruptions or data compromises were reported from these thwarted attacks on core ministerial infrastructure. The incident marked another instance in a series of digital offensives against Italian public sector targets during this period.

While government systems repelled the intrusions, attackers achieved partial success against the Rome Transportation Consortium (ATAC), the primary public transit operator serving the capital region. Hackers compromised ATAC's public-facing website, though the organization confirmed the breach remained confined to this external digital platform. Critical operational technology systems controlling actual transportation services—including buses, trams, metro lines, and commuter rail—experienced no disruptions according to ATAC's assessment. The attack exclusively impaired website functionality without affecting real-time vehicle operations, passenger safety systems, or scheduling infrastructure. No data theft or secondary impacts beyond the temporary website outage were disclosed in initial reports.

Sources

Sources available to members: 1 source.