Retail & Consumer Platforms

Source: ACN / CSIRT Italia — Operational Summary 1° semestre 2025

Source: ACN / CSIRT Italia — Operational Summary 1° semestre 2025 (published 4 August 2025). Covers cyber events recorded and confirmed-impact incidents handled by CSIRT Italia in H1 2025. H1 and H2 are separate semester operational summaries from ACN / CSIRT Italia. Values must not be summed into an approved annual total. Values are ACN / CSIRT Italia operational context only. Values are not total Italian business incident prevalence, not hidden incident prevalence, not all-Italy attack prevalence, not industry-specific evidence, and not proof of compliance, certification, or security.

Methodology: Data covers cyber events recorded and confirmed-impact incidents handled by ACN / CSIRT Italia in H1 2025 (first semester). The 53% increase is a year-on-year change versus H1 2024 in recorded cyber event counts; it does not measure a per-business incident rate. The 91 ransomware attacks are a subcategory within the H1 confirmed-impact incident context; H1 source uses the wording "ransomware attacks". H1 and H2 values come from separate semester operational summaries; do not present H1 + H2 as an approved annual total. These figures are Italy ACN / CSIRT Italia H1 2025 operational reporting context only; they are not total Italian business incident prevalence, hidden incident prevalence, all-Italy attack prevalence, population-wide victimisation rate, industry-specific evidence, compliance achievement, certification, or proof of security.

Source: ACN / CSIRT Italia — Operational Summary 2° semestre 2025

Source: ACN / CSIRT Italia — Operational Summary 2° semestre 2025 (published 27 January 2026). Covers cyber events recorded and confirmed-impact incidents handled by CSIRT Italia in H2 2025. H1 and H2 are separate semester operational summaries from ACN / CSIRT Italia. Values must not be summed into an approved annual total. Values are ACN / CSIRT Italia operational context only. Values are not total Italian business incident prevalence, not hidden incident prevalence, not all-Italy attack prevalence, not industry-specific evidence, and not proof of compliance, certification, or security.

Methodology: Data covers cyber events recorded and confirmed-impact incidents handled by ACN / CSIRT Italia in H2 2025 (second semester). The 30% increase is a year-on-year change versus H2 2024 in recorded cyber event counts; the 25% decrease is a year-on-year change versus H2 2024 in confirmed-impact incidents; neither measures a per-business incident rate. The 54 ransomware cases (H2 source wording: "cases") are a subcategory within the H2 confirmed-impact incident context; H1 source uses the wording "ransomware attacks" — do not merge into a single annual ransomware total. The "over 5,000 communications" refers to CSIRT Italia proactive communications to subjects with systems at risk in H2 2025; this is not a count of resolved incidents, not a count of protected organisations, and must not be presented as proof of protection. H1 and H2 values come from separate semester operational summaries; do not present H1 + H2 as an approved annual total. These figures are Italy ACN / CSIRT Italia H2 2025 operational reporting context only; they are not total Italian business incident prevalence, hidden incident prevalence, all-Italy attack prevalence, population-wide victimisation rate, industry-specific evidence, compliance achievement, certification, or proof of security.