Cyber Incident Victim: Comune di Pisa
Date:
May 2025
Location:
Italy
Summary
A ransomware attack attributed to the Nova cyber gang targeted the Comune di Pisa, with the group claiming responsibility and indicating the likely exfiltration of approximately 2 terabytes of data. The incident involved ransomware encryption reportedly deployed shortly before the public announcement of the breach.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
On the evening of Saturday, April 26, 2025, the cybercriminal group known as Nova publicly claimed responsibility for conducting a ransomware attack against the Comune di Pisa. This criminal announcement, made via their typical channels, indicated they had successfully compromised the municipality's systems. Analysis of samples associated with the attack suggested that the ransomware encryption process was executed by Nova just a few hours prior to their public claim of responsibility. The primary malicious action confirmed by the attackers' claim was the deployment of ransomware, designed to encrypt the Comune di Pisa's data and disrupt operations. Furthermore, Nova explicitly stated they had successfully exfiltrated a significant volume of data from the Comune di Pisa's compromised systems during the incident.
The attackers asserted that approximately 2 terabytes (TB) of data belonging to the Comune di Pisa were stolen during the breach preceding the ransomware deployment. This exfiltration represents a substantial data theft incident impacting the municipal administration. The public claim by Nova serves as confirmation of the attack's occurrence and its dual nature, combining data theft with system encryption. The incident constitutes a significant cybersecurity breach affecting the Italian local government entity. Specific details regarding the exact nature of the stolen data, the immediate operational impact on municipal services, or the specific response actions taken by the Comune di Pisa were not detailed within the available source material concerning Nova's announcement and the initial reporting.