Municipality of Pisa listed on nova ransomware leak site
Municipality of Pisa is listed in a leak announcement published by the threat actor group known as nova. The group claims to have obtained data belonging to the institution.
- Published
- 2 min read
- 2 min read
- Ransomware group: nova
- Country: Italy
- Sector: Government & Defense
- Announcement date: May 10, 2025
Municipality of Pisa targeted by nova ransomware group
The Municipality of Pisa has been listed in a data breach announcement published by a threat actor group known as nova. According to the claim made on the group's leak site, the attackers have successfully obtained data belonging to the Italian institution.
Details of the alleged data theft
The nova group has listed data it claims belongs to the Municipality of Pisa on its dedicated leak site. The threat actor suggests that it will leak a portion of the data, which is stated to be 100 GB in size. Furthermore, the announcement alleges that a total of 2 TB of data has been obtained by the group during the operation.
The leak announcement claims to contain a wide variety of sensitive information. The types of data allegedly stolen include:
- Government documents
- Payment data
- Databases
- Software codes
- Email contents
- Customer information
- Phone numbers
- Invoices
- Employee information
- Personal IDs
- Hospital documents
About the Municipality of Pisa
The Municipality of Pisa is the local government body of the city of Pisa in the Tuscany region of Italy. It is the official institution that provides information on municipal services, administrative procedures, and local government activities to residents.
Potential impact and risks
This incident may pose a risk of exposing the personal data of citizens and employees within the Municipality of Pisa. The alleged presence of identity documents and medical records could lead to identity theft for the affected individuals. As the institution is based in Italy, the situation may result in legal consequences under the GDPR (EU).
Public information regarding the nova group is limited. The institution might face operational disruptions and an increased risk of secondary cyberattacks. In such scenarios, organizations often face the pressure of double extortion, a tactic where attackers not only encrypt systems but also threaten to release sensitive data to force payment. To defend against such threats, organizations typically implement robust backup strategies, multi-factor authentication, and continuous monitoring of their networks to detect unauthorized access early.