Pro-Russian Hackers Target Italian Foreign Minister and Brenner Tunnel Infrastructure
Italian officials face digital intimidation following government support for Ukraine's sovereignty and independence.
1Targeting Italian Leadership
Italian Foreign Minister Antonio Tajani announced on November 7, 2026, that his personal data was leaked on the dark web. He attributed this breach to pro-Russian hackers retaliating against Italy's consistent support for Ukraine. Tajani serves as both Foreign Minister and Deputy Prime Minister within the current Italian government.
2Extortion and Intimidation Tactics
The hackers are actively seeking additional private information regarding Tajani and his family members. They have expressed a willingness to pay for further sensitive data, effectively escalating the incident from a simple data leak to targeted intimidation. Tajani stated that his public defense of Ukrainian democracy triggered these hostile actions.
3Dark Web Exposure
Monitoring activities by cybersecurity authorities identified Tajani’s picture within a list of 18 individuals labeled as hostile to the Russian Federation. This list, discovered on the Tor network, also included various cybersecurity experts. The Minister noted that these attacks also respond to his ministry's recent efforts to bolster national cybersecurity.
4Governmental Response
Prime Minister Giorgia Meloni publicly expressed her support for Tajani following the disclosure. She emphasized that the unauthorized sale of confidential information concerning public officials is a matter of serious concern. The Italian government maintains that such criminal activities must be addressed with the utmost determination and systemic security measures.
5Brenner Tunnel Incident
Simultaneously, the company managing the 55-kilometer Brenner Base Tunnel project confirmed a separate cyberattack. This rail link connects Innsbruck, Austria, and Fortezza, Italy. The incident occurred on October 17, involving the theft of non-public data through the company's internet-connected network, highlighting a broader pattern of digital threats against infrastructure.
6Attribution and Investigation
Initial investigations into the Brenner Base Tunnel breach point toward a pro-Russian hacker group identified as Everest. The company responded by activating cybersecurity protocols and isolating affected systems. They have enlisted external specialists to conduct forensic analysis, though Moscow has not commented on these specific allegations or the broader incidents.
7Broader Cyber Warfare Context
The incidents reflect a recurring trend where critical infrastructure and political figures become targets of state-aligned cyber operations. While Russia consistently denies involvement in foreign hacking, the timing and nature of these attacks suggest a strategic effort to disrupt European support for Ukraine and intimidate officials through digital exposure.
8Future Security Outlook
These events underscore the vulnerability of public officials and infrastructure projects to sophisticated cyber threats. As Italy continues its transparent support for Ukraine, the government must balance diplomatic stances with enhanced defensive postures. Observers should monitor whether these digital intimidation tactics lead to further operational disruptions or increased security regulations.