Threat Intelligence Brief
Curated summary with source attribution
Source: ransomware.live
Threat Risk: High
Victim: Ernesto Malvestiti S.p.A.
Incident: Data breach and exfiltration of sensitive corporate, personnel, and technical data.
Impact: Severe; exposure of PII, trade secrets, and unauthorized access credentials for multiple global automotive partners.
Attacker: Unidentified ransomware operator
Analysis: The breach involves the exfiltration of comprehensive payroll data, GDPR-protected health records, and proprietary engineering IP. Most critical is the leak of plaintext credentials for multiple global automotive OEM portals, which creates a significant downstream risk for the entire supply chain. The exposure of PLC programs and robot code further suggests a compromise of operational technology (OT) documentation.
Recommendations: Immediately rotate all B2B portal and administrative credentials across the organization; Implement strict multi-factor authentication (MFA) for all remote and third-party access; Audit and migrate all plaintext password files to a secure secrets management solution
Source: Ransomware.live
Editorial note: this post summarizes third-party reporting and links to the original source.
View Original Source