6.1 TB of Italian School Documents Offered for Sale as Spaggiari Disputes the Scope

⚠Potential impact

A school administration supplier collects documents from families rather than from customers, which is what makes this set unusual. The categories named include paediatric medical files, prescriptions, vaccination records and report cards, so a meaningful share of the people in it are children, and the exposure will outlast their school years by decades. Alongside those sit ISEE income declarations, which describe household finances in detail, and photographed identity cards and driving licences. Scanned identity documents are the component that matters most, because they support account opening and lending checks in a way a leaked password never does, and unlike a password a national identity card cannot be rotated. The actor makes the fraud application explicit in the post. There is also a dispute worth watching over whether the compromised component touched the register and school management systems, which the company denies, because the answer determines whether this affects the schools using one product or every family who ever submitted a form through it.