Microdevice listed on beast ransomware leak site

• Ransomware group: beast
• Country: Italy
• Sector: Technology
• Announcement date: October 21, 2025

The Italy-based technology firm Microdevice has been listed on the leak site of the ransomware group known as beast. The threat actor claims to have targeted the organization, resulting in a significant data breach involving a large volume of sensitive information.

The claimed attack and data leak

According to the announcement made by the beast ransomware group on October 21, 2025, the group claims to have targeted Microdevice on October 10, 2025. The threat actor asserts that they have successfully exfiltrated 850 GB of data, which they claim belongs to the Italian institution. This type of activity is often associated with double extortion tactics, where attackers not only encrypt an organization's systems but also threaten to release sensitive data on public leak sites to increase pressure for ransom payments.

To demonstrate the validity of their claims, the group has shared various document samples on their leak site. These samples reportedly contain a variety of the institution's financial and operational data, serving as proof of the breach to the public and the targeted entity.

Details of the allegedly leaked data

The information shared by the threat actor includes several types of sensitive documentation. Based on the screenshots provided by the group, the leaked content appears to include various operational and financial records. The specific types of data identified in the leak include:

• Bank account details
• IBAN numbers
• Commercial correspondence
• Invoices

The presence of such data suggests that the breach may have access to the internal administrative and financial workflows of the company.

About Microdevice

Microdevice is an Italian technology company that specializes in providing building automation systems and supervision solutions. Their services are designed for a wide range of environments, including hotels, offices, homes, and hospitals. With over 30 years of experience, the company operates in several critical areas such as access control, energy consumption monitoring, and facility management. They develop integrated management solutions through their proprietary Hi4-Supervisor platform.

Potential impact and security considerations

The allegedly leaked data may pose significant risks to the institution's financial processes and its various business partners. Because the leaked information includes bank account details and IBAN numbers, there is a potential for the data to be used to facilitate identity theft or fraud attempts against the institution and related parties. Furthermore, such a breach can lead to negative impacts on the institution's commercial reputation.

As an entity based in Italy, the data involved in this incident may be subject to the regulations set forth by the European Union's General Data Protection Regulation (GDPR). Organizations operating within the EU must navigate complex legal requirements regarding data protection and breach notification when sensitive information is compromised.

In the technology and automation sector, maintaining the integrity of operational and financial data is vital for trust. While information regarding the beast group remains limited in the public domain, this incident highlights the ongoing risks faced by technology providers. Organizations in this sector often implement defensive measures such as network segmentation, multi-factor authentication, and continuous monitoring to mitigate the risk of unauthorized access and data exfiltration.