Italy: Large Sensitive Data Trafficking Network Dismantled

On October 26, 2024, the Milan Prosecutor’s Office announced the dismantling of a large sensitive data trafficking network targeting the highest levels of the Italian state. The theft of sensitive information allowed criminals to compile dossiers on journalists, officials, political figures, and business leaders, which were then sold for blackmail purposes.

According to Reuters, the cybercriminals accessed several Italian state databases between 2019 and March 2024, including the SDI, the Italian Ministry of the Interior’s investigative system. The network’s epicenter was the private investigation company Equalize, co-owned by Carmine Gallo, a former police officer involved in organized crime enforcement, and Enrico Pazzali, president of the Milan Fair Foundation.

The mastermind behind this data theft is believed to be Nunzio Samuele Calamucci, a 44-year-old IT consultant and head of Equalize’s operational branch. According to judicial wiretaps, he allegedly boasted of having stolen data on 800,000 Italians and possesses around 15 TB of sensitive information.

The criminal group reportedly compiled dossiers on several high-profile political figures, including former Prime Minister Matteo Renzi, current Senate President Ignazio La Russa and his sons, and MEP and former Milan Mayor Letizia Moratti. Additionally, several major Italian companies, such as food producer Barilla and energy company Erg, allegedly commissioned espionage operations from Equalize targeting their own employees.

Italian authorities have arrested and placed four individuals under house arrest: Carmine Gallo, Nunzio Calamucci, another private investigator, and the owner of a security company. Sixty other individuals have also been indicted, suspected of “computer hacking conspiracy,” “illegal access to data,” and “breach of state secrets.”