Cordeiro Guerra & Associati listed by Everest ransomware group

• Ransomware group: Everest
• Country: Italy
• Sector: Professional Services
• Announcement date: September 2, 2025

The ransomware group known as Everest has listed the Italian organization Cordeiro Guerra & Associati on its leak site, alleging that a data breach has occurred. This announcement, which appeared on the group's digital platform, indicates a potential compromise of the firm's information assets.

The claimed attack event

According to the announcement published on the Everest leak site, the group claims to have targeted Cordeiro Guerra & Associati. The group published this leak announcement regarding the organization on August 31, 2025. The group asserts that it has successfully obtained the institution's data and has subsequently publicized this claim on its dedicated leak platform.

As of the current reporting, the announcement remains active and listed on the group's digital site. In the landscape of modern cyber threats, ransomware groups often utilize these leak sites to increase pressure on their victims. This practice is a hallmark of double extortion tactics, where threat actors not only encrypt an organization's systems but also threaten to release sensitive information to the public or specific stakeholders to compel payment.

Details regarding the compromised data

At this stage of the investigation, there is no information available regarding the nature of the leaked or compromised data. The listing does not specify the types of files, the volume of information, or the specific categories of data that the group claims to have exfiltrated from the firm.

The listing names no data types.

About Cordeiro Guerra & Associati

Cordeiro Guerra & Associati is an Italy-based law firm specializing in tax law and corporate law. The firm provides professional services in tax planning, legal consultancy, and tax litigation at both national and international levels. Given its role in the professional services sector, the firm handles sensitive legal and financial matters for its clients.

Risk assessment and implications

The alleged data breach at Cordeiro Guerra & Associati may pose significant risks to client confidentiality and trade secrets, given the firm's operations in the professional services sector. Because the firm handles specialized legal and tax matters, the unauthorized access to its data could have broad implications for its clients' private affairs.

Since the institution is based in Italy, any confirmed data breach could lead to legal repercussions and administrative fines under the GDPR (EU General Data Protection Regulation). The regulatory framework in Europe places heavy emphasis on the protection of personal data, and organizations must adhere to strict protocols to avoid significant penalties in the event of a breach.

The past activities of the Everest group suggest that the compromised data may be used for extortion or sold to third parties. This highlights the persistent threat posed by ransomware-as-a-service models and organized cybercrime groups that monetize stolen information. Organizations facing such threats often need to remain vigilant against potential identity theft and targeted phishing attacks that may follow a leak.

To defend against such threats, organizations in the professional services sector typically focus on robust security measures. This includes implementing multi-factor authentication, maintaining rigorous backup protocols, and conducting regular security awareness training for employees to recognize social engineering attempts. Continuous monitoring of network traffic and rapid incident response capabilities are also essential components of a modern cybersecurity posture designed to mitigate the impact of potential breaches.