Sofinter confirms credential-enabled intrusion and corporate data exfiltration

Überblick

Potentially affected categories include identity and contact details, identity documents, employment, payroll and banking data, health information, and union or political information. Categories vary by individual; the notice does not give an affected total. The official page has an original publication timestamp dated February 13 and a March-updated body.

Zeitlicher Ablauf

1. UnbekanntVorfall
2. UnbekanntEntdeckt
3. 2026-02-13Bekanntgegeben
4. 2026-01-28

   IT infrastructure restoration completed.

5. 2026-02-09

   A criminal complaint was filed.

6. 2026-02-20

   ACN/CSIRT-Italy was notified.

Reaktion der Organisation

Infrastructure was restored by January 28. Sofinter reset credentials, strengthened MFA and other controls, reported to authorities and police, and contacted identified individuals.

Quellen

1. IT security incident update — March 2026Sofinter S.p.A. · 2026-11-09