No disruption impacting the basic systems
CAGLIARI. «Last February 1st, the in-house company SardegnaIT suffered a ransomware-type cyber attack which also spread to the management systems of the digital archives of the Regional Administration. The attack was managed with the Postal Police of Cagliari with the support of Cnaipic. No redemption was requested and no negotiations were initiated by the regional administration offices. The typical contact request to the hacker group was present in the attacked PCs and servers, which by our offices was notified exclusively to the Postal Police. The attack was limited exclusively to a part of the management systems, workstations and file archives, which were then published on the dark web on 17 June ». The Sardinia Region specifies this in a note on the hacker attack suffered.
“After the first phase of crisis management, we immediately proceeded to restore the data from the backup systems that were intact. Compared to similar criminal episodes that have affected other public administrations, the Sardinia Region has not suffered any disservice impacting the basic systems. The attack did not therefore spread to the central systems: accounting, protocol, personnel management. The databreach – continues the note from the Region – was immediately notified by the Data Controller (through the office of the Data Protection Officer) to the data protection supervisor, following the correct administrative procedure. A complaint was also filed with the competent authorities through the Postal Police of Cagliari, which is carrying out the investigations, and considering the international context, the offices have kept the utmost confidentiality also due to the first leak of information as the investigations are still ongoing. in order to identify those responsible “.