Italy Cyber Operational Context — H1 2025
Italy H1 2025 Cyber Operational Context — ACN / CSIRT Italia 1° Semestre Summary
Market context — not industry-specific evidence
The following data reflects cyber events and confirmed-impact incidents handled by Agenzia per la Cybersicurezza Nazionale (ACN) / CSIRT Italia and reported in the H1 2025 (1° semestre) operational summary published 4 August 2025. H1 figures are from this single semester publication and are presented as semester-level context only.
Cyber events recorded — H1 2025
- H1 2025 — cyber events recorded
- 1,549
- Unit
- cyber events recorded by ACN / CSIRT Italia in H1 2025
- Period
- H1 2025 (January–June 2025) cyber event, confirmed-impact incident, ransomware attack, and year-on-year change context from ACN / CSIRT Italia operational reporting
- Scope
- Italy ACN / CSIRT Italia H1 2025 operational context — 1° semestre summary
ACN / CSIRT Italia recorded 1,549 cyber events in H1 2025, as reported in the H1 semester operational summary.
Italy ACN / CSIRT Italia operational context from the H1 2025 semester summary only. Must not be summed with H2 figures to form an annual total. Not total Italian business incident prevalence and not industry-specific evidence.
Confirmed-impact incidents — H1 2025
- H1 2025 — confirmed-impact incidents
- 346
- Unit
- confirmed-impact incidents in H1 2025
- Period
- H1 2025 (January–June 2025) cyber event, confirmed-impact incident, ransomware attack, and year-on-year change context from ACN / CSIRT Italia operational reporting
- Scope
- Italy ACN / CSIRT Italia H1 2025 operational context — 1° semestre summary
ACN / CSIRT Italia handled 346 confirmed-impact incidents in H1 2025, as reported in the H1 semester operational summary.
Italy ACN / CSIRT Italia operational context from the H1 2025 semester summary only. Must not be summed with H2 figures to form an annual total. Not total Italian business incident prevalence and not industry-specific evidence.
Ransomware attacks — H1 2025
- H1 2025 — ransomware attacks (91)
- 91
- Unit
- ransomware attacks in H1 2025
- Period
- H1 2025 (January–June 2025) cyber event, confirmed-impact incident, ransomware attack, and year-on-year change context from ACN / CSIRT Italia operational reporting
- Scope
- Italy ACN / CSIRT Italia H1 2025 operational context — 1° semestre summary
ACN / CSIRT Italia reported 91 ransomware attacks in H1 2025. Source terminology uses "attacks" in the H1 operational summary.
H1 source uses the term "ransomware attacks". Must not be combined with H2 ransomware cases into an annual ransomware total. Subcategory within H1 confirmed-impact incident context. Not total Italian ransomware prevalence and not industry-specific evidence.
H1 cyber events — year-on-year increase vs H1 2024
- H1 cyber events — year-on-year increase vs H1 2024
- 53%
- Unit
- percent increase in cyber events versus H1 2024
- Period
- H1 2025 (January–June 2025) cyber event, confirmed-impact incident, ransomware attack, and year-on-year change context from ACN / CSIRT Italia operational reporting
- Scope
- Italy ACN / CSIRT Italia H1 2025 operational context — 1° semestre summary
Cyber events increased 53% in H1 2025 versus H1 2024.
Year-on-year change in recorded event counts between H1 2025 and H1 2024 only. Does not measure a per-business incident rate, is not comparable with H2 figures, and does not represent total Italian business incident trends.
Source: ACN / CSIRT Italia — Operational Summary 1° semestre 2025
Source: ACN / CSIRT Italia — Operational Summary 1° semestre 2025 (published 4 August 2025). Covers cyber events recorded and confirmed-impact incidents handled by CSIRT Italia in H1 2025. H1 and H2 are separate semester operational summaries from ACN / CSIRT Italia. Values must not be summed into an approved annual total. Values are ACN / CSIRT Italia operational context only. Values are not total Italian business incident prevalence, not hidden incident prevalence, not all-Italy attack prevalence, not industry-specific evidence, and not proof of compliance, certification, or security.
Methodology: Data covers cyber events recorded and confirmed-impact incidents handled by ACN / CSIRT Italia in H1 2025 (first semester). The 53% increase is a year-on-year change versus H1 2024 in recorded cyber event counts; it does not measure a per-business incident rate. The 91 ransomware attacks are a subcategory within the H1 confirmed-impact incident context; H1 source uses the wording "ransomware attacks". H1 and H2 values come from separate semester operational summaries; do not present H1 + H2 as an approved annual total. These figures are Italy ACN / CSIRT Italia H1 2025 operational reporting context only; they are not total Italian business incident prevalence, hidden incident prevalence, all-Italy attack prevalence, population-wide victimisation rate, industry-specific evidence, compliance achievement, certification, or proof of security.
Accessible data table
| Metric | Value | Source | Scope | Reporting period |
|---|---|---|---|---|
| H1 2025 — cyber events recorded | 1,549 cyber events recorded by ACN / CSIRT Italia in H1 2025 | ACN / CSIRT Italia — Operational Summary 1° semestre 2025 | Italy ACN / CSIRT Italia H1 2025 operational context — 1° semestre summary | H1 2025 (January–June 2025) cyber event, confirmed-impact incident, ransomware attack, and year-on-year change context from ACN / CSIRT Italia operational reporting |
| H1 2025 — confirmed-impact incidents | 346 confirmed-impact incidents in H1 2025 | ACN / CSIRT Italia — Operational Summary 1° semestre 2025 | Italy ACN / CSIRT Italia H1 2025 operational context — 1° semestre summary | H1 2025 (January–June 2025) cyber event, confirmed-impact incident, ransomware attack, and year-on-year change context from ACN / CSIRT Italia operational reporting |
| H1 2025 — ransomware attacks (91) | 91 ransomware attacks in H1 2025 | ACN / CSIRT Italia — Operational Summary 1° semestre 2025 | Italy ACN / CSIRT Italia H1 2025 operational context — 1° semestre summary | H1 2025 (January–June 2025) cyber event, confirmed-impact incident, ransomware attack, and year-on-year change context from ACN / CSIRT Italia operational reporting |
| H1 cyber events — year-on-year increase vs H1 2024 | 53% percent increase in cyber events versus H1 2024 | ACN / CSIRT Italia — Operational Summary 1° semestre 2025 | Italy ACN / CSIRT Italia H1 2025 operational context — 1° semestre summary | H1 2025 (January–June 2025) cyber event, confirmed-impact incident, ransomware attack, and year-on-year change context from ACN / CSIRT Italia operational reporting |
