> ## Content Index
> Fetch the complete content index at: https://darkwebinformer.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# 6.1 TB of Italian School Documents Offered for Sale as Spaggiari Disputes the Scope
- URL: https://darkwebinformer.com/6-1-tb-of-italian-school-documents-offered-for-sale-as-spaggiari-disputes-the-scope/
- Published: 2026-08-23T21:33:25.000Z
- Updated: 2026-08-23T21:33:25.000Z
- Author: Dark Web Informer
- Tags: Data Breaches

Breach Report Italy Education Software 50,000 USD 

## 6.1 TB of Italian School Documents Offered for Sale as Spaggiari Disputes the Scope

A forum user posting as **xpl0itrs** is selling what they describe as **6.1 TB of documents** taken from **Gruppo Spaggiari Parma**, a long established Italian supplier of school administration software. The post lists **identity cards, tax and income documents, diplomas, driving licences, report cards, prescriptions, medical and paediatric certificates and vaccination records**, and characterises the set as a document dump rather than a structured database. Samples are published openly. The actor states they are **publishing because negotiation with the company failed**, and quotes Spaggiari's own statement, which acknowledges an event but confines it to a forms component and **excludes the register and school management systems**. The asking price is **50,000 dollars**. The claim is **unverified**.

Severity CRITICAL 

[ ![WhiteIntel, dark web exposure monitoring](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2026/08/whiteintel_io_banner.jpg) ](https://whiteintel.io/?utm%5Fsource=darkwebinformer.com&utm%5Fmedium=referral&utm%5Fcampaign=whiteintel) 

Volume6.1 TB

Price$50,000

Document typesThirteen

Actorxpl0itrs

### ▣Post details

TargetGruppo Spaggiari Parma

CountryItaly

SectorEducation software

ListingSelling, 50,000 USD

Volume6.1 TB of files

Stated sourceDirect compromise

ObservedAug 23, 2026

Actorxpl0itrs

### !What the post claims

- 6.1 TB of documents
- Identity cards
- Driving licences
- Tax documents
- Codice fiscale documents
- ISEE income statements
- Diploma certificates
- School report cards
- Medical certificates
- Paediatric medical files
- Prescriptions
- Vaccination records
- CV and job applications
- Two samples of each type
- Further types not listed
- Negotiation said to have failed

### ◱Screenshots

[ ![Forum listing offering 6.1 TB of documents attributed to Gruppo Spaggiari Parma, August 2026](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/size/w1304/format/webp/2026/08/1247891623549876234598725364978982173651.png) Screenshot 1 Redacted preview ](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/size/w1304/format/webp/2026/08/1247891623549876234598725364978982173651.png) [ ![Sample documents included in the listing, shown redacted](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/size/w1304/format/webp/2026/08/1247891623549876234598725364978982173652.png) Screenshot 2 Redacted preview ](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/size/w1304/format/webp/2026/08/1247891623549876234598725364978982173652.png) [ ![Further sample documents included in the listing, shown redacted](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/size/w1304/format/webp/2026/08/1247891623549876234598725364978982173653.png) Screenshot 3 Redacted preview ](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/size/w1304/format/webp/2026/08/1247891623549876234598725364978982173653.png) [ ![Additional sample documents included in the listing, shown redacted](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/size/w1304/format/webp/2026/08/1247891623549876234598725364978982173654.png) Screenshot 4 Redacted preview ](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/size/w1304/format/webp/2026/08/1247891623549876234598725364978982173654.png) [ ![Section of the listing quoting the company response and stating a price of 50,000 dollars](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/size/w1304/format/webp/2026/08/1247891623549876234598725364978982173655.png) Screenshot 5 Redacted preview ](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/size/w1304/format/webp/2026/08/1247891623549876234598725364978982173655.png) 

Forum post offering Gruppo Spaggiari Parma documents for sale, observed 23 August 2026.

### ☷Mapped techniques

Mapped from the actor's own account. Claimed, not confirmed.

- Initial access [T1190](https://attack.mitre.org/techniques/T1190/) Exploit public facing application Inferred The company locates the event in a web component used to compile and submit forms. The actor describes no mechanism at all.
- Collection [T1213](https://attack.mitre.org/techniques/T1213/) Data from information repositories Stated Described as a document dump spanning many file categories rather than a table export.
- Exfiltration [T1567](https://attack.mitre.org/techniques/T1567/) Exfiltration over web service Inferred Samples are hosted on an actor controlled site. The route out of the environment is not described.
- Impact [T1657](https://attack.mitre.org/techniques/T1657/) Financial theft Stated The actor says files were sent to the company first and that publication followed a failed negotiation.

### ⚠Potential impact

A school administration supplier collects documents from families rather than from customers, which is what makes this set unusual. The categories named include **paediatric medical files, prescriptions, vaccination records and report cards**, so a meaningful share of the people in it are **children**, and the exposure will outlast their school years by decades. Alongside those sit **ISEE income declarations**, which describe household finances in detail, and photographed identity cards and driving licences. Scanned identity documents are the component that matters most, because they support account opening and lending checks in a way a leaked password never does, and unlike a password **a national identity card cannot be rotated**. The actor makes the fraud application explicit in the post. There is also a dispute worth watching over **whether the compromised component touched the register and school management systems**, which the company denies, because the answer determines whether this affects the schools using one product or every family who ever submitted a form through it.

### iStatus Unverified

Unusually for a listing of this kind, **the target has already responded in public**, and the post quotes that response in full. The company confines the incident to a forms component and states that its register and school management systems are separate and unaffected, while noting that attributions to other platforms are not supported by its analysis. The actor treats that as evasive and published **a named individual's records to demonstrate the depth of the set**, which Dark Web Informer will not reproduce. So the existence of an incident is not really in question here, only its **perimeter**, and the two accounts cannot both be right. The volume, the file categories and the actor's motive are all **uncorroborated and come from the party trying to sell the data**. Dark Web Informer has **not retrieved the samples and is not linking them**, nor the contact addresses.

Want everything on this breach? **Paid subscribers** get the full unredacted claim details and more. After subscribing, check out the [threat feed](https://darkwebinformer.com/threat-feed/?utm%5Fsource=alert&utm%5Fmedium=card&utm%5Fcampaign=spaggiari-parma-2026-08-23&utm%5Fcontent=threat-feed) and search there for this alert.

[View pricing →](https://darkwebinformer.com/pricing?utm%5Fsource=alert&utm%5Fmedium=card&utm%5Fcampaign=spaggiari-parma-2026-08-23&utm%5Fcontent=pricing-button) 

[Dark Web Informer](https://darkwebinformer.com/?utm%5Fsource=alert&utm%5Fmedium=card&utm%5Fcampaign=spaggiari-parma-2026-08-23&utm%5Fcontent=footer) // Threat Intelligence