Ransomware 2024: Italy Among the Most Targeted Countries

Ransomware attacks in Italy surged in 2024, placing the country among the most affected in the world. Find out which sectors are at risk and how to respond.

May 08, 2025 1 min read

Analyst reading a printed report at a desk Made with AI

Ransomware attacks in Italy have reached alarming levels in 2024, placing the country among the most targeted worldwide. The latest report by Italy's National Cybersecurity Agency (ACN) recorded a 40% increase in cyber incidents, with 1,979 total cases 573 classified as severe.

The month of May alone saw 283 attacks a staggering 148% increase over April confirming ransomware as a major ongoing threat. No sector is immune, but the healthcare industry has been hit particularly hard, experiencing a 111% rise in ransomware attacks between 2023 and 2024. Organizations subject to NIS2 baseline security measures must implement adequate protection against these attacks.

Cybercriminals are evolving their methods, increasingly adopting ransomware-as-a-service (RaaS) models, allowing even less experienced actors to launch dangerous attacks. Notorious groups like LockBit 3.0, RansomHub, and 8Base have all targeted Italian organizations in recent months. Our NIS2 compliance guide provides detailed recommendations for addressing these threats.

The ransom cost is not only economic it damages reputation, trust, and operations. For many businesses, the aftermath of an attack is far more costly than prevention. Organizations should leverage our Virtual CISO service to strengthen their security posture and prepare for NIS2 compliance.

This is a wake-up call for all businesses: investing in cybersecurity is no longer optional. Proactive measures, up-to-date threat intelligence, staff training, and incident response planning are essential for digital resilience.

Official sources

This article was reviewed with AI tools for proofreading and error checking. Despite these checks it may contain inaccuracies: for compliance decisions, always refer to the official texts.

Self-assessment · NIST CSF 2.0 · ISO 27001

Cyber Check-up

A self-assessment that returns your company's cyber profile: its security posture and the recommendations to mitigate risks and start your cybersecurity journey.

Our service

Perimeter protection

Threat Blocker, Cloud Defender and VPN: traffic passes through our threat intelligence filters, and the services are managed from Cyber Console.

Learn more
Share this post:

Related news

January 31, 2026

Cybersecurity Monthly Report - January 2026 (Italy, EU, Global)

Aegister’s January 2026 monthly cybersecurity report: EU cybersecurity package with Cybersecurity Act revision and NIS 2 simplification amendments, D…

May 29, 2025

Cybersecurity Update - Week 22 of 2025

Aegister's weekly cybersecurity update for Week 22 of 2025, covering major threats, trends, regulatory changes (NIS 2, DORA), GRC topics, and interna…

January 31, 2025

Cybersecurity Monthly Report - January 2025 (Italy, EU, Global)

Aegister's January 2025 monthly cybersecurity report: DORA goes live, NIS 2 registration milestones, key vulnerabilities (VPN/edge), ransomware polic…