Studio Marchi - Studio Professionale Associato targeted by Everest ransomware group

• Ransomware group: Everest
• Country: Italy
• Sector: Professional Services
• Announcement date: May 5, 2026

Everest claims data leak at Studio Marchi - Studio Professionale Associato

The threat actor known as Everest has claimed to have leaked data belonging to Studio Marchi - Studio Professionale Associato. This announcement, made on a dedicated leak site, indicates a potential security incident involving the Italian firm. The group has officially listed the organization as a victim, signaling a targeted operation aimed at the professional services sector.

Details of the alleged attack

The Everest group has listed Studio Marchi - Studio Professionale Associato on its leak site. According to the announcement, the threat actor has initiated a countdown process, which serves as a mechanism to threaten the institution with the public release of its data. This tactic is a common feature of modern ransomware operations, where attackers use time pressure to increase the psychological stress on the victim organization.

The Everest group is not a new entity in the cybercrime landscape. The group has been known for engaging in data theft and extortion activities since 2020. By utilizing a countdown, the group employs a high-pressure tactic designed to force the victim into compliance with their demands. Such activities are characteristic of ransomware-as-a-service models and sophisticated extortion campaigns that prioritize the threat of exposure over simple encryption.

Scope of the leaked information

Regarding the specifics of the breach, the available information remains limited. The provided screenshots display various document previews that allegedly belong to the institution's files. However, there is no detailed information regarding the full scope and type of the leaked data. The listing names no specific data types or categories of information that have been compromised.

In many such incidents, the exact volume of stolen information is not immediately disclosed by the attackers, who often withhold specific details to maintain leverage during negotiations. While previews of documents may be visible, the total amount of data and the specific nature of the files remain unconfirmed at this stage.

About Studio Marchi - Studio Professionale Associato

Studio Marchi is a professional services firm based in Bologna, Italy. The organization specializes in several key areas of professional consultancy, including tax consulting, accounting, and corporate law. Given its specialized role in handling sensitive financial and legal matters, the firm operates in a sector that is a frequent target for cybercriminals due to the high value of the information it manages.

Potential impact and industry implications

The claim made by Everest may pose a significant risk of exposing sensitive client and commercial data, given the institution's operation in the professional services sector. Because the organization handles tax, accounting, and legal documentation, the potential for identity theft and the misuse of commercial secrets is a primary concern. The stolen data could potentially be used in secondary attacks or targeted phishing campaigns against the firm or its clients.

Furthermore, as the institution is based in Italy, a potential data breach could lead to legal sanctions and administrative fines under the GDPR (EU General Data Protection Regulation). Organizations operating within the European Union must adhere to strict data protection standards, and a failure to secure sensitive information can result in significant regulatory scrutiny. The institution and its clients may need to remain vigilant against identity theft as a direct consequence of this threat.

The situation also highlights the prevalence of double extortion tactics. In these scenarios, attackers do not just encrypt systems but also steal data to use as leverage, increasing the pressure on the institution to pay. To mitigate such risks, organizations in the professional services sector often implement robust defensive measures, such as multi-factor authentication, regular security awareness training, and rigorous data encryption protocols. Increased vigilance is essential for both the institution and its client base to defend against the potential fallout of such a breach.