> ## Content Index
> Fetch the complete content index at: https://darkwebinformer.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# Xacria XNO Allegedly Breached: 446 Service Orders and Subscriber PII Exposed From the Italian Carrier-Grade Telecom Network Orchestration Platform Used by FASTWEB and SKY ITALIA
- URL: https://darkwebinformer.com/xacria-xno-allegedly-breached-446-service-orders-and-subscriber-pii-exposed-from-the-italian-carrier-grade-telecom-network-orchestration-platform-used-by-fastweb-and-sky-italia-a-threat/
- Published: 2026-05-14T17:15:28.000Z
- Updated: 2026-05-14T17:15:28.000Z
- Author: Dark Web Informer
- Tags: Data Breaches

Breach Report · Italy

# Xacria XNO Allegedly Breached: 446 Service Orders and Subscriber PII Exposed From the Italian Carrier-Grade Telecom Network Orchestration Platform Used by FASTWEB and SKY ITALIA

A threat actor claims to have breached Xacria XNO (Xacria Network Orchestrator), a carrier-grade, cloud-native network orchestration platform used by Tier 1, 2, and 3 telecommunications operators in Italy for zero-touch provisioning and automation of fiber broadband, mobile, and enterprise network services. The actor states the dump includes 446 service orders, full subscriber PII, mobile provisioning records, enterprise circuit data including router CLI commands, and hardcoded security tokens reused across all webhook integrations.

Post details

Actor(s)\[Citizen\] cc5ab

SectorTelecommunications / Network Orchestration

TypeData Breach

Records446 service orders plus subscriber PII

CountryItaly 

Date14/05/2026

Compromised data

- 446 service orders spanning fiber broadband (FTTH/GPON), mobile broadband (MBB), and enterprise EVPN circuits for operators including FASTWEB and SKY ITALIA
- Subscriber PII including customer account numbers, IMSI identifiers, MSISDN phone numbers (Italian +39 prefix), MAC addresses, and assigned IP addresses
- Mobile subscriber provisioning records with prepaid charging profiles, 5G NSA/SA service status, data quotas, traffic shaping policies, and international roaming configuration
- Enterprise circuit data with VDSL access technology, QoS profiles, VLAN assignments, pseudowire IDs, and complete router CLI commands for Cisco IOS-XR, Huawei NE40E, Juniper MX960, and ZTE platforms
- Hardcoded security token (value redacted) reused across all webhook integrations to the XFlow workflow engine

Screenshots

[ ![Screenshot 1](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2026/05/3237985879263598723568792398765.png) 01 ](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2026/05/3237985879263598723568792398765.png) 

Want the non-blurred screenshots? Subscribe and check out the threat feed section. [darkwebinformer.com/pricing](https://darkwebinformer.com/pricing/)