Azienda Servizi Pubblici Olbia

Azienda Servizi Pubblici Olbia (ASPO) is a public services company headquartered in Olbia, Italy. The organisation delivers municipal services to the local community, with a particular emphasis on digital mobility solutions. It operates the ASPO app, a mobile platform that enables users to access public transport and related services. To support ticketing and journey planning, ASPO collaborates with the MyCicero service provider. Through this partnership, the organisation aims to improve accessibility and efficiency of urban transportation for residents and visitors. ASPO’s activities are aligned with the broader public service mandate of the Olbia municipality.

In March 2025, ASPO experienced a cybersecurity incident that originated from a breach at its service provider MyCicero. The breach was traced to unidentified external malicious actors targeting the data center supplier Pluservice. Unauthorized access led to the exfiltration of personal data from databases managed by a sub‑processor. Compromised information included names, contact details, and location data of ASPO app users. The organisation confirmed that the incident could result in loss of confidentiality, potentially enabling identity theft, and loss of availability affecting service access. Following detection, ASPO temporarily took the affected system offline to conduct security verification and implement remedial actions. The event underscores the organisation’s reliance on third‑party providers and highlights the importance of robust supply‑chain risk management. ASPO has communicated the incident publicly through its official website, providing transparency to affected users.