2023 Postel Medusa ransomware — subsidiary breach

2023 Unknown records affected

Data compromised

Company data; scope not fully disclosed

Technical writeup

Postel S.p.A. (Poste Italiane subsidiary) hit by Medusa ransomware. Attackers exploited Microsoft Exchange vulnerabilities. Portal unreachable Aug 15. $500k ransom demanded. Italian DPA imposed €900,000 fine.

Root cause

Medusa ransomware; Microsoft Exchange vulnerabilities

References

https://databreaches.net/2024/10/28/postel-s-p-a-and-the-2023-data-breach-the-medusa-attack-and-sanctions-from-the-data-protection-authority