Metronotte Vigilanza

Profile narrative

According to the incident report, Metronotte Vigilanza is described as an Italian security firm. The same sources indicate that the company’s headquarters is located in Italy. The ransomware group LockBit claimed responsibility for a cyberattack against Metronotte Vigilanza on May 11, 2023, as stated in their public announcement. During the attack, LockBit exfiltrated data from the firm’s systems, a detail highlighted in the group’s leak site posting. The stolen material comprised identification documents and contractual information, as evidenced by the samples shared by the attackers.

LockBit threatened to publish the exfiltrated data unless a ransom was paid, a tactic commonly used in their extortion attempts. To pressure the victim, the attackers set a countdown timer indicating when the data would be released if the demand was not met. Samples of the stolen data were posted on LockBit’s data leak site to demonstrate the authenticity of the breach. LockBit operates under a ransomware‑as‑a‑service model, which allows affiliates to deploy the ransomware in exchange for a share of the profits. The group is known for conducting highly targeted attacks against various sectors, a characteristic noted in multiple cybersecurity analyses.

Incidents

1 incident linked to this organisation.