Hacker Exposes 2.3TB in FS Italiane / Almaviva Supply Chain Breach (2024)

In June 2024, a hacker reportedly breached the systems of Almaviva, an Italian IT provider serving FS Italiane Group, the nation’s railway operator. The attacker claimed to have exfiltrated 2.3TB of sensitive corporate data—including documents, contracts, financial information, and communications—garnered by exploiting weaknesses in the supplier’s defenses. Although FS Italiane’s operational technology was not directly compromised, the breach of Almaviva’s infrastructure exposed highly confidential client and business data, raising concerns about third-party risks and data privacy for an array of Italian public sector organizations.

This incident highlights a worrying trend of attackers targeting IT services providers as a conduit for large-scale data breaches against critical infrastructure operators. With supply chain vulnerabilities on the rise, organizations must urgently reassess their vendor risk management and network segmentation strategies to prevent similar cascading impacts.

This breach underscores the increasing threat posed by attacks on IT service providers, which often serve as crucial links in the digital supply chain for national infrastructure. The urgency stems from the potential for such breaches to spill over and disrupt essential services or expose sensitive data on a massive scale, making improved vendor controls and segmentation an immediate priority.