Italy's surge in cyber attacks highlights identity‑management failures

Italy is experiencing a sharp rise in cyber incidents. The CLUSIT 2026 report notes a 42 % increase in 2025, with 507 critical incidents documented, and the national cybersecurity agency recorded 313 confirmed incidents in March 2026—a rise of 81 % over the previous month. Although Italy represents only about 2 % of global GDP, it accounts for nearly 10 % of worldwide cyber offensives. The average cost of a data breach in Italy reached €3.6 million in 2025, and 60 % of small‑ and medium‑size enterprises hit by severe ransomware failures do not survive beyond six months.

Experts point to weak identity and access management as the primary entry point: roughly half of global breaches are linked to poor credential handling, and stolen credentials rose more than 40 % in 2025, flooding dark‑web markets with billions of username‑password combinations. The concepts of “Zero Trust” and the “Patchpocalypse” warn that attack speed now unfolds in minutes, rendering traditional patch cycles ineffective, especially for legacy systems. The authors call for immediate isolation, granular controls and a shift from remediation to containment.