Cyber Incident Victim: Civil Protection Agency in Bolzano
Date:
Jun 2025
Location:
Italy
Summary
A cyberattack disrupted telephone systems at the State Traffic Information Center, State Emergency Call Center, Fire Department headquarters, and State Radio Service, all located at the Agency for Civil Protection headquarters in Bolzano. The problem was identified and contained, with no restrictions on emergency calls for the public. A ransom demand was placed in the contaminated facilities but was not met. Work is ongoing to secure the main system and resolve the disruptions. All official communications will be made via this channel. The public is asked for their understanding regarding this technical disruption. The Civil Protection Agency and the South Tyrolean Health Service will provide further information.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On the evening of June 23, 2025, technical problems were detected in the telephone systems of several control centers located at the Agency for Civil Protection headquarters on Drususallee in Bolzano. The affected facilities included the State Traffic Information Center, the State Emergency Call Center, the headquarters of the Professional Fire Brigade, and the State Radio Service. The impairment primarily involved telephone systems or parts thereof, which disrupted traffic reporting data and impacted infomobility reports. Despite the disruption, officials confirmed that there were no restrictions on emergency calls for the public and that all emergency call centers remained accessible by phone.
By the afternoon of June 24, 2025, authorities reported that the problem had been identified and completely contained. Major damage was prevented in the early stages through the immediate activation of appropriate procedures. Work continued around the clock to secure the main system and resolve the remaining disruptions, with additional staff deployed to the State Emergency Call Center to handle processes manually. The traffic reporting and information mobility services at the State Traffic Information Center were restored and functioning again. A ransom demand was placed in the contaminated facilities but was not met by the responsible parties.
The Governor of South Tyrol and State Councilor for Civil Protection Arno Kompatscher stated at a press conference that the system outage was caused by a cyberattack and that the responsible authorities and public prosecutor's office had been immediately informed. Officials indicated that surveys were ongoing to assess the full scope of the incident and that all official communications would be issued through the same channel. The Civil Protection Agency and the South Tyrolean Health Service asked the public for their understanding regarding the technical disruption and promised to provide further information as the situation evolved.