Cyber Incident Victim: Comune di Torre del Greco
Date:
Nov 2022
Location:
Italy
Summary
The municipality of Torre del Greco suffered a ransomware attack where hackers demanded €200,000 to restore access to compromised data, prompting the immediate suspension of municipal office operations. Mayor Giovanni Palomba publicly denounced the incident, refusing any illicit negotiations while collaborating with the Postal Police and judicial authorities to address the breach. The attack caused significant disruption to local administrative services, with officials urging citizen cooperation during the crisis.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On November 16, 2022, the municipality of Torre del Greco, Italy, suffered a cyberattack involving unauthorized access to its computer systems. Attackers compromised municipal data and subsequently issued a ransom demand of 200,000 euros for the restoration of access to the encrypted or stolen information. Mayor Giovanni Palomba publicly disclosed the incident on November 17, confirming the extortion attempt and characterizing the event as an extremely serious breach. The attack prompted immediate operational disruptions, with municipal offices suspending all administrative activities to contain the incident and prevent further system compromise. Authorities initiated a criminal investigation coordinated with the Postal Police to identify the perpetrators.
The municipal administration categorically refused to engage with the attackers' financial demands, ruling out any illicit negotiation. Mayor Palomba emphasized full cooperation with law enforcement agencies while urging citizens to exercise patience during service interruptions caused by the attack. No technical details regarding the attack vector, specific compromised systems, or data types were disclosed publicly. The municipality filed formal legal complaints with judicial authorities to pursue criminal charges against the responsible parties. Recovery efforts and forensic analysis proceeded under law enforcement supervision, though no timeline for full operational restoration was provided in initial reports.