A hacker attack targeted the IT systems of the Chamber of Deputies. The IT intrusion was confirmed to Corriere della Sera by Montecitorio’s administrative and political leaders. According to the reconstruction of the newspaper, the attack affected the institution’s website and led to the violation of three mailboxes, among these there is the institutional email address of the Prime Minister Giorgia Meloni, that of the Fratelli d’Italia deputy Andrea Delmastro, former undersecretary of Justice, and that of the deputy Paolo Formentini, of the League.
This is the box that every MP receives upon entering Parliament and that the Prime Minister has had since 2022, when she was re-elected as a MP (before receiving the task of forming the government). It must be said immediately that the hacked account is a formal and inactive container, considering that for daily activities Meloni relies on the address of the head of the Government, guarded by the highest levels of protection available to Palazzo Chigi, designed precisely to block the way to any attempt at unwanted access.
According to what was reported by the Chamber’s press office, “this is a non-emergency issue that arises on a daily basis.” Furthermore, as stated in the note released, “all protection measures have been put in place, also in collaboration with ACN (National Cybersecurity Agency)”, measures which “may also include the temporary deactivation of some functions of the IT systems, according to practice. Furthermore, it appears that for some days similar attack attempts and pressure on the IT systems have also intensified towards other national, European and international institutions”.
The IT infrastructure held up as a whole and the intrusion was limited. Administration technicians are now measuring the actual extent of the attack, while investigators work to trace who carried it out.
The incident falls into one of the categories that ACN reports most frequently, namely the compromise of mailboxes. In the handbook on good basic cybersecurity practices, intended for public administration employees, the Agency places it alongside phishing, credential theft and ransomware among the daily threats. Most attacks arise from a mistake made by the person on the other side of the screen, therefore a fake email, an attachment opened by mistake. And within minutes all systems go offline.
Again according to ACN, in recent years approximately 20% of the attacks suffered in Italy have involved public administrations and, according to ACN’s recent Operational summary, a periodic report that photographs the state of cyber threats in Italy, 485 cyber events were recorded in September 2026, an increase of 57% compared to the 309 in August. Accidents are also on the rise, standing at 235 compared to 196 in the previous month.
An increase in events, we read in the report, is largely attributable to the resumption of hacktivist DDoS attacks which mostly affected local public administration websites. The most frequent threats detected were DDoS, email compromise and phishing.
