Italy's interior ministry says hackers spread false alarms to destabilise Italy

A two-hour session in Rome

Italy's national committee for public order and security met at the Interior Ministry, the Viminale, in Rome on 10 November 2026. Interior Minister Matteo Piantedosi chaired the session, which lasted about two hours. The agenda covered the security risks raised by the latest cyberattacks and the wider cyber threat. Heads of the police forces and of the intelligence services attended, along with representatives of the National Cybersecurity Agency (ACN). Il Sole 24 ORE names the intelligence chiefs of AISI and AISE, Chief of Defence Staff Luciano Portolano and the national anti-mafia and anti-terrorism prosecutor Giovanni Melillo, while the agency is directed by Andrea Quacivi. Before the meeting, Il Giornale reported that the officials and investigators whose confidential data had been sought included the foreign minister, Rome's prosecutor and the head of the Postal Police.

What the ministry says the hackers want

The ministry said the attacks share a clear pattern, as set out in its statement.

“A common trait has emerged across all the episodes examined: the intention by hackers to create elements of destabilisation and to spread alarms.”

The ministry says the alarms later proved unfounded and were meant to damage the reputation of the institutions targeted. Its assessment goes beyond disrupting digital systems or services. According to Il Sole 24 ORE, the aim is to stoke insecurity, pressure institutions and erode their credibility, and the approach appears increasingly focused on psychological effects. The ministry keeps that assessment separate from the attribution of individual episodes, which remains under investigation.

Measures agreed at the meeting

The committee agreed to step up monitoring of the most vulnerable IT security systems following the latest attacks. It also said further measures would be assessed to raise protection of public administrations, critical infrastructure, businesses and citizens. Police forces, intelligence services, the ACN and other competent bodies must intensify information exchange and align their investigative work so threats can be identified and countered more quickly. The plan also calls for faster information flows to public and private operators about cyber risks. Investment is to go into protecting networks, critical infrastructure and essential services, and into improving response capacity.

The attacks behind the alarm

Open reports that earlier hacks had remotely tampered with refrigerators in dozens of supermarkets. The same outlet says the pro-Russian group NoName057(16) published personal data of minister Tajani and other officials on the dark web. Open also reports that the bomb alarms which diverted several flights were false, and that an alleged theft of confidential data from the DIA was false too. Il Giornale adds that the cases under review include sabotage of systems that control the cold chain at companies. Investigations into the individual episodes are still in progress.

European warning and political reaction

Juhan Lepassaar, executive director of ENISA, the EU cybersecurity agency, told AFP that household appliances or home routers could be the next targets. He said Europe should invest more to counter growing threats. ENISA's 2026 report notes an improved cybersecurity posture across the 27 EU member states, yet the level of cyber risk in Europe remains significant. Lepassaar also pointed to the need for timely information sharing and stronger coordination after the refrigeration incidents. The Democratic Party (Pd) has asked for a briefing in Parliament, while the government says it is now tightening controls.