Hackers targeted email accounts at Italy’s Chamber of Deputies

Hackers targeted e-mail accounts at Italy’s Chamber of Deputies, among them an inbox assigned to Prime Minister Giorgia Meloni, in recent days.

Italy’s Chamber of Deputies confirmed that hackers targeted its IT systems and said it took security measures with Italy’s National Cybersecurity Agency (ACN). Palazzo Chigi said Meloni does not use that assigned inbox for government communications.

Security Affairs says the intrusion reached three parliamentary e-mail accounts, including inboxes tied to Prime Minister Giorgia Meloni, former Justice undersecretary Andrea Delmastro and lawmaker Paolo Formentini. Analytics Insight says reports show that intruders targeted other legislators’ inboxes, meaning the compromise extended beyond the premier’s parliamentary e-mail.

Officials have not published a full technical account of the intrusion, how deeply the intruders got in, or whether intruders took any data. They have not said who is responsible, why it happened, how intruders targeted the systems, or the scale of the damage, and it remains unconfirmed whether intruders stole any confidential data. Security Affairs says investigators must determine whether anyone blocked the intruders, whether they opened an inbox, whether they read messages and whether intruders exposed login credentials or other information.

The lower house described the event as non-emergency and said attacks of this type happen daily. It also said that attempts like these and pressure on its systems had increased in recent days, hitting other Italian, European and international organizations. Analytics Insight says the breach fits a broader series of digital attacks across Italy and Europe, affecting government bodies, infrastructure and companies. It also acknowledged that pressure against institutions in Italy and other countries is rising.

One security step may be to briefly turn off selected IT functions if that helps limit risk. Analytics Insight describes shutting down selected functions as an established security procedure for containing the threat.

Italy’s Foreign Ministry was hit on October 8 by a distributed denial-of-service attack, which floods systems with traffic, that media reports linked to pro-Russian actors. No public evidence links that operation to the breach at the Chamber. Security Affairs discusses the email compromise alongside that separate operation while cautioning against treating them as linked.

Hybrid warfare is not limited to a single tactic, Security Affairs says. The approach can combine cyber operations, espionage, propaganda and disinformation, along with economic pressure and other efforts to target vulnerable points or influence decisions, even without full coordination.

A digital intrusion matters even if it shuts down no public service, Security Affairs says. Reading political letters may support espionage, future break-ins or influence campaigns. No proof ties the intrusion to any foreign government or a coordinated influence campaign. Pinning responsibility would demand technical evidence, intelligence and careful analysis.

Security Affairs says the lower house mistakes attack frequency for severity when it calls the event non-emergency. Officials should not substitute reassurance for transparency while the technical investigation continues.

Security Affairs says officials should audit access controls and login systems, review account tracking and e-mail forwarding rules, and check suspicious-activity detection. They should check whether dormant accounts stay active and whether older accounts receive equal protection and monitoring.

Security Affairs says the breach should prompt a wider review of how parliament secures its communications and responds to incidents, because new bodies and appointments alone cannot guarantee security. Cooperation with the ACN matters, yet the public deserves an account of the investigation and the fixes that follow.

As Italy and other European states approach future elections, the issue matters more, Security Affairs says. Parliaments could face outages, intelligence gathering, attempts to exploit divisions or campaigns to sway public debate.

Security Affairs says one breached inbox can launch further attacks. Messages sent from a real address look credible and make outreach easier to colleagues, staff and outside partners. A non-governmental inbox may still hold intelligence value; the key question is what investigators could learn from it and how investigators might apply that knowledge. A parliamentary inbox can expose contacts, conversations, calendars and how the institution works, and with enough access an intruder may find documents, personal data or material that could help target other officials.

Security Affairs says the first step is to establish what happened at the Chamber without unsupported claims about who is behind it or why. The second is to use those findings to harden parliamentary communications. The Chamber’s handling should be judged by whether it establishes what happened, sets out the risks clearly and fixes flaws, rather than by assertions that the attack is contained.