Hackers against external provider Infocert: users' personal data stolen. The company: "Spid, signature and Pec data not compromised".

Part of the Italian Tinexta group, which specialises in digitalisation and IT security, Infocert has around 10 million customers and a turnover of EUR 137 million in 2022. It currently manages 1.8 million active Spid and 64 million annual logins through its digital identity services. The company also collaborates in the development of the European digital wallet.

This incident underlines once again how crucial it is to strengthen IT security measures to protect users' personal data, especially in a context where digital identity is increasingly central.

"We reiterate that the security and functioning of the SPID, digital signature and PEC services, as well as all other InfoCert services, have never been compromised by the illicit data theft that has affected the systems of an external provider, which manages a customer care platform used by our Customer Care". Thus InfoCert's clarification in a note.

"The data concerned are limited to those needed to process support requests sent by customers via the ticketing system".

"We can therefore confirm," the note continues, "that, to date, contrary to what has been reported by some unofficial online sources, the operability, security and integrity of InfoCert's services has not been compromised in any way.

"As we have already informed you, on 27 December last, we promptly detected that some information relating to our customers had been made available on a platform dedicated to the buying and selling of abusively acquired data. In cooperation with our supplier, we immediately put in place all technical measures to verify the event and protect our users by containing the illegal activity."

"Technical analyses are still underway," InfoCert concludes, "which we are carrying out with the utmost thoroughness and together with our supplier; at the same time, we are proceeding with the appropriate complaints and notifications to the competent authorities. We will obviously continue to monitor the situation with the utmost attention and provide timely updates to our customers"..