{"id":20901,"date":"2021-10-15T16:00:53","date_gmt":"2021-10-15T14:00:53","guid":{"rendered":"https:\/\/www.bacciardipartners.it\/?p=20901"},"modified":"2021-10-18T19:48:34","modified_gmt":"2021-10-18T17:48:34","slug":"hacker-attack-on-the-lazio-region-what-does-it-teach-us","status":"publish","type":"post","link":"https:\/\/www.bacciardistudiolegale.it\/en\/hacker-attack-on-the-lazio-region-what-does-it-teach-us\/","title":{"rendered":"Hacker attack on the Lazio Region: what does it teach us?"},"content":{"rendered":"

By Prof. Fabrizio Corona<\/span> – Digital Law<\/span><\/a> Area<\/p>\n

Read the article in printable version<\/span><\/a><\/p>\n

\"Attacco_hacker_regione_Lazio_conseguenze_bacciardi\"On August 4, 2021, the Lazio Region suffered a hacker attack on the regional data server. The attack started from the computer of an employee in smart working, infected by malware. Data on VM-Ware virtual machines and regional documents were encrypted. Also aggravating the Lazio Region’s position was the absence of an offline backup and the hackers’ deletion of the online one. The attack, from an analysis of the latest \u201cClusit report\u201d on IT security in Italy, was among the most predictable, as the public sector is among the most affected targets by Cybercrime since 2020. The majority of attacks occur with malware and the trend is clearly growing.<\/p>\n

But what are the legal\/regulatory considerations in reference to this attack?<\/p>\n

First of all, it is necessary to analyze the minimum security measures of the AGID (Agency for Digital Italy) applicable to the Public Administration, which require that the supports containing at least one of the backup copies be not permanently accessible from the system, in order to avoid that attacks to the latter may also involve all the backup copies.
\nIt is also necessary to take into consideration the prescriptions of the European Directive NIS (Network and Information Security), which imposes on the Member States of the European Union the adoption of a series of common measures for IT security, with the aim of defining a single strategic line between the various States of the Union against the risk of incidents damaging networks and information systems.
\nThe critical infrastructure of the Lazio Region is fully covered by the European NIS Directive, which expressly provides for the obligation to implement an incident response plan that describes the detailed procedures to ensure an effective response to incidents involving personal data breach, as well as a recovery plan to be executed after a security incident.<\/p>\n

Secondly, the Lazio Region is subject to the application of privacy regulations, which provide specific obligations to notify data subjects when the breach poses a high risk to their rights and freedoms. The Italian Guarantor Authority for the protection of personal data has immediately followed with particular attention the developments of the IT attack suffered by the Region and has already analyzed the first preliminary notification of data breaches sent by the Region itself, in order to assess the severity of the attack.<\/p>\n

This attack could lead the Lazio Region to suffer not only damage to its image, but also a privacy penalty which, in the most serious cases, can reach \u20ac 20,000,000.00.<\/p>\n\n

<\/div>","protected":false},"excerpt":{"rendered":"

By Prof. Fabrizio Corona – Digital Law Area Read the article in printable version On August 4, 2021, the Lazio Region suffered a hacker attack on the regional data server. The attack started from the computer of an employee in smart working, infected by malware. Data on VM-Ware virtual machines and regional documents were encrypted. […]<\/p>\n","protected":false},"author":3,"featured_media":20881,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[16,157],"tags":[],"acf":[],"yoast_head":"\nHacker attack on the Lazio Region: what does it teach us?<\/title>\n<meta name=\"description\" content=\"Legal considerations by the Digital Law Department of our Firm about the consequences of not securing information systems and data.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.bacciardistudiolegale.it\/en\/hacker-attack-on-the-lazio-region-what-does-it-teach-us\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Hacker attack on the Lazio Region: what does it teach us?\" \/>\n<meta property=\"og:description\" content=\"Legal considerations by the Digital Law Department of our Firm about the consequences of not securing information systems and data.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.bacciardistudiolegale.it\/en\/hacker-attack-on-the-lazio-region-what-does-it-teach-us\/\" \/>\n<meta property=\"og:site_name\" content=\"Bacciardi Partners\" \/>\n<meta property=\"article:published_time\" content=\"2021-10-15T14:00:53+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2021-10-18T17:48:34+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.bacciardistudiolegale.it\/src\/uploads\/Attacco_hacker_Regione_Lazio_conseguenze.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1000\" \/>\n\t<meta property=\"og:image:height\" content=\"605\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Alessandro Schettini\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.bacciardistudiolegale.it\/en\/hacker-attack-on-the-lazio-region-what-does-it-teach-us\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.bacciardistudiolegale.it\/en\/hacker-attack-on-the-lazio-region-what-does-it-teach-us\/\"},\"author\":{\"name\":\"Alessandro Schettini\",\"@id\":\"https:\/\/wpad\/#\/schema\/person\/67e45957515bfa392ce9e94b44b81070\"},\"headline\":\"Hacker attack on the Lazio Region: what does it teach us?\",\"datePublished\":\"2021-10-15T14:00:53+00:00\",\"dateModified\":\"2021-10-18T17:48:34+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.bacciardistudiolegale.it\/en\/hacker-attack-on-the-lazio-region-what-does-it-teach-us\/\"},\"wordCount\":436,\"publisher\":{\"@id\":\"https:\/\/wpad\/#organization\"},\"articleSection\":[\"News\",\"Domestic and international agreements and Digital Law Area\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.bacciardistudiolegale.it\/en\/hacker-attack-on-the-lazio-region-what-does-it-teach-us\/\",\"url\":\"https:\/\/www.bacciardistudiolegale.it\/en\/hacker-attack-on-the-lazio-region-what-does-it-teach-us\/\",\"name\":\"Hacker attack on the Lazio Region: what does it teach us?\",\"isPartOf\":{\"@id\":\"https:\/\/wpad\/#website\"},\"datePublished\":\"2021-10-15T14:00:53+00:00\",\"dateModified\":\"2021-10-18T17:48:34+00:00\",\"description\":\"Legal considerations by the Digital Law Department of our Firm about the consequences of not securing information systems and data.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.bacciardistudiolegale.it\/en\/hacker-attack-on-the-lazio-region-what-does-it-teach-us\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.bacciardistudiolegale.it\/en\/hacker-attack-on-the-lazio-region-what-does-it-teach-us\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.bacciardistudiolegale.it\/en\/hacker-attack-on-the-lazio-region-what-does-it-teach-us\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.bacciardistudiolegale.it\/en\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Hacker attack on the Lazio Region: what does it teach us?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/wpad\/#website\",\"url\":\"https:\/\/wpad\/\",\"name\":\"Bacciardi Partners\",\"description\":\"Studio Legale Internazionale\",\"publisher\":{\"@id\":\"https:\/\/wpad\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/wpad\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/wpad\/#organization\",\"name\":\"Bacciardi Partners\",\"url\":\"https:\/\/wpad\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/wpad\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.bacciardipartners.it\/src\/uploads\/logo-bacciardi-partners-1.png\",\"contentUrl\":\"https:\/\/www.bacciardipartners.it\/src\/uploads\/logo-bacciardi-partners-1.png\",\"width\":512,\"height\":512,\"caption\":\"Bacciardi Partners\"},\"image\":{\"@id\":\"https:\/\/wpad\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/twitter.com\/bacciard\",\"https:\/\/www.linkedin.com\/company\/bacciardi-and-partners\/\",\"https:\/\/www.youtube.com\/channel\/UCiNMebCg3xLTURpTxovN3Kg\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/wpad\/#\/schema\/person\/67e45957515bfa392ce9e94b44b81070\",\"name\":\"Alessandro Schettini\",\"url\":\"https:\/\/www.bacciardistudiolegale.it\/en\/author\/alessandro\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Hacker attack on the Lazio Region: what does it teach us?","description":"Legal considerations by the Digital Law Department of our Firm about the consequences of not securing information systems and data.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.bacciardistudiolegale.it\/en\/hacker-attack-on-the-lazio-region-what-does-it-teach-us\/","og_locale":"en_US","og_type":"article","og_title":"Hacker attack on the Lazio Region: what does it teach us?","og_description":"Legal considerations by the Digital Law Department of our Firm about the consequences of not securing information systems and data.","og_url":"https:\/\/www.bacciardistudiolegale.it\/en\/hacker-attack-on-the-lazio-region-what-does-it-teach-us\/","og_site_name":"Bacciardi Partners","article_published_time":"2021-10-15T14:00:53+00:00","article_modified_time":"2021-10-18T17:48:34+00:00","og_image":[{"width":1000,"height":605,"url":"https:\/\/www.bacciardistudiolegale.it\/src\/uploads\/Attacco_hacker_Regione_Lazio_conseguenze.jpg","type":"image\/jpeg"}],"author":"Alessandro Schettini","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.bacciardistudiolegale.it\/en\/hacker-attack-on-the-lazio-region-what-does-it-teach-us\/#article","isPartOf":{"@id":"https:\/\/www.bacciardistudiolegale.it\/en\/hacker-attack-on-the-lazio-region-what-does-it-teach-us\/"},"author":{"name":"Alessandro Schettini","@id":"https:\/\/wpad\/#\/schema\/person\/67e45957515bfa392ce9e94b44b81070"},"headline":"Hacker attack on the Lazio Region: what does it teach us?","datePublished":"2021-10-15T14:00:53+00:00","dateModified":"2021-10-18T17:48:34+00:00","mainEntityOfPage":{"@id":"https:\/\/www.bacciardistudiolegale.it\/en\/hacker-attack-on-the-lazio-region-what-does-it-teach-us\/"},"wordCount":436,"publisher":{"@id":"https:\/\/wpad\/#organization"},"articleSection":["News","Domestic and international agreements and Digital Law Area"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.bacciardistudiolegale.it\/en\/hacker-attack-on-the-lazio-region-what-does-it-teach-us\/","url":"https:\/\/www.bacciardistudiolegale.it\/en\/hacker-attack-on-the-lazio-region-what-does-it-teach-us\/","name":"Hacker attack on the Lazio Region: what does it teach us?","isPartOf":{"@id":"https:\/\/wpad\/#website"},"datePublished":"2021-10-15T14:00:53+00:00","dateModified":"2021-10-18T17:48:34+00:00","description":"Legal considerations by the Digital Law Department of our Firm about the consequences of not securing information systems and data.","breadcrumb":{"@id":"https:\/\/www.bacciardistudiolegale.it\/en\/hacker-attack-on-the-lazio-region-what-does-it-teach-us\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.bacciardistudiolegale.it\/en\/hacker-attack-on-the-lazio-region-what-does-it-teach-us\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.bacciardistudiolegale.it\/en\/hacker-attack-on-the-lazio-region-what-does-it-teach-us\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.bacciardistudiolegale.it\/en\/"},{"@type":"ListItem","position":2,"name":"Hacker attack on the Lazio Region: what does it teach us?"}]},{"@type":"WebSite","@id":"https:\/\/wpad\/#website","url":"https:\/\/wpad\/","name":"Bacciardi Partners","description":"Studio Legale Internazionale","publisher":{"@id":"https:\/\/wpad\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/wpad\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/wpad\/#organization","name":"Bacciardi Partners","url":"https:\/\/wpad\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/wpad\/#\/schema\/logo\/image\/","url":"https:\/\/www.bacciardipartners.it\/src\/uploads\/logo-bacciardi-partners-1.png","contentUrl":"https:\/\/www.bacciardipartners.it\/src\/uploads\/logo-bacciardi-partners-1.png","width":512,"height":512,"caption":"Bacciardi Partners"},"image":{"@id":"https:\/\/wpad\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/twitter.com\/bacciard","https:\/\/www.linkedin.com\/company\/bacciardi-and-partners\/","https:\/\/www.youtube.com\/channel\/UCiNMebCg3xLTURpTxovN3Kg"]},{"@type":"Person","@id":"https:\/\/wpad\/#\/schema\/person\/67e45957515bfa392ce9e94b44b81070","name":"Alessandro Schettini","url":"https:\/\/www.bacciardistudiolegale.it\/en\/author\/alessandro\/"}]}},"_links":{"self":[{"href":"https:\/\/www.bacciardistudiolegale.it\/en\/wp-json\/wp\/v2\/posts\/20901"}],"collection":[{"href":"https:\/\/www.bacciardistudiolegale.it\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.bacciardistudiolegale.it\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.bacciardistudiolegale.it\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.bacciardistudiolegale.it\/en\/wp-json\/wp\/v2\/comments?post=20901"}],"version-history":[{"count":0,"href":"https:\/\/www.bacciardistudiolegale.it\/en\/wp-json\/wp\/v2\/posts\/20901\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.bacciardistudiolegale.it\/en\/wp-json\/wp\/v2\/media\/20881"}],"wp:attachment":[{"href":"https:\/\/www.bacciardistudiolegale.it\/en\/wp-json\/wp\/v2\/media?parent=20901"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.bacciardistudiolegale.it\/en\/wp-json\/wp\/v2\/categories?post=20901"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.bacciardistudiolegale.it\/en\/wp-json\/wp\/v2\/tags?post=20901"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}