Comacchio

Comacchio, also known by its alias, is an organisation headquartered in Italy. Publicly available sources do not provide detailed description of its core products or services. The company’s primary market focus and operational scope are not disclosed in the material consulted. Consequently, the profile relies on the limited factual information that is verifiable.

On 12 April 2023, Comacchio suffered a ransomware attack attributed to the LockBit cyber gang. LockBit claimed responsibility for the breach and subsequently posted samples of the exfiltrated data on its data leak site. The released samples included an identity card and several internal invoices, intended to demonstrate the validity of the intrusion. By sharing these artefacts, the attackers sought to pressure the organisation into negotiating a ransom payment. The incident followed LockBit’s typical tactic of using leaked proof to validate their claims.

Following the leak, LockBit initiated its standard countdown timer, warning that the full dataset would be published if a ransom was not paid within the specified period. The countdown is a characteristic element of LockBit’s extortion model, designed to create urgency for the victim. No further details regarding Comacchio’s ownership, parent‑subsidiary relationships, or organisational structure are available in the sources reviewed. The attack underscores the ongoing ransomware threat faced by Italian enterprises across various sectors. As of the information cutoff, no additional public statements from Comacchio about the incident’s resolution have been identified.