Lazio Region, the latest news on safety and Leonardo’s position
Europol and Fbi investigate with the Postal Police the cyber attack against the Lazio Region, which says: "Our security partner is the Leonardo group". But the group specifies that …
News on the case of the cyber attack against the Lazio Region.
Europol and the FBI are also working with the Italian Postal Police in the investigation of the hacker attack that hit the Lazio Region last Sunday.
EUROPOL AND FBI WORK WITH THE POSTAL POLICE
The objective of the investigators is to identify any similarities with other attacks carried out in the past with cryptolocker ransomware that took place in Italy and abroad. Meanwhile, new details on the affair were provided by the regional councilor, Alessio D'Amato in a video interview granted to Repubblica .
WHAT THE LAZIO REGION SAYS
The attack, explained D'Amato, would have arisen "from the violation of the user of an employee in smartworking". "They hit at a particular moment, when the level of attention goes down," he said. “The keys to the door that gives access to the Ced, the system that manages health data, building practices and many services to the citizen, have been changed. It is a situation that creates profound discomfort ”, added the commissioner.
THE SAFETY OF LAZIO IN THE HANDS OF THE LEONARDO GROUP
The "levels" of security "we had were high. The security partner of the Region has been the Leonardo group for over two years. We are facing an act of a criminal and terrorist nature ", Alessio D'Amato, councilor for health of the Lazio Region told the Gr1 ( the Lazio Crea company also uses Fastweb as a supplier; here the facts and the position of the company of the Swisscom group ).
LEONARDO'S PRECISATION
With regard to the agreement with the Lazio Region, Leonardo, when asked about it, clarified that he had never had the operational management of the monitoring and cyber protection services of Lazio Crea but that he had only provided governance services for the design of a Security operation ventre (Soc) and specifically to define processes and procedures as well as support regarding the legislation on the protection of personal data. Leonardo also explains that, at the request of Lazio Crea, it was involved, through the Cyber Crisis management team, in post-cyber attack recovery operations.
D'AMATO'S NOTE ON LEONARDO
The contract between LazioCrea and Leonardo is clear and needs no comments, I simply reported the subject of the agreement that has existed for over two years for three project phases, including vulnerability assessment and IT security procedures. Transparency in these cases is a must ". The councilor for Health and Social-Sanitary Integration of the Lazio Region, Alessio D'Amato, writes in a note.
THE ANNOUNCEMENT ON VACCINE BOOKINGS
"Within 72 hours we will withdraw the booking system for vaccines with two new platforms", added the commissioner (72 hours had already been indicated yesterday, so a total of 96 hours would be needed at the moment.
ALSO ERG UNDER ATTACK
According to some press rumors, in fact, several hacker attacks are in progress against institutions and companies throughout Europe: in Italy, in recent days, after the latest cases involving, among others, Enel and Luxottica , also Erg according to the newspaper Repubblica di today . The energy company Erg, on the other hand, declared that it had “recorded some limited inefficiencies in the ICT infrastructure currently being resolved, thanks also to the immediate activation of its internal procedures on cybersecurity”. In a note, the group nevertheless confirmed “that all the plants are operating correctly and have not undergone any interruptions, thus guaranteeing business operations”.
THE DUTCH CASE
The Netherlands has also ended up in the sights of cybercriminals. Local media speak of a "national crisis" and the country's security in danger: the alarm was raised by the directors of three major Dutch IT security companies (Eye, Hunt & Hackett and Northwave) who have asked for urgent government intervention . Ransomware attacks, the three experts explained, are more and more numerous and requests for help are too many to be handled by Dutch companies alone. As the three directors also explained, ransomware is a virus that spreads as a seemingly harmless file or email attachment but once downloaded it encrypts files on the system. And paying the ransom is not the same as having a guarantee that the hackers will unlock the files. To try to stem the crisis, the Dutch police launched the No More Ransom platform, which contains the decryption codes for many types of ransomware, encouraging attack victims to check the platform before considering paying the ransom.
This is a machine translation from Italian language of a post published on Start Magazine at the URL https://www.startmag.it/economia/regione-lazio-sicurezza-leonardo/ on Wed, 04 Aug 2021 14:44:30 +0000.