Italian cybersecurity media reported that healthcare organization ASST Rhodense suffered a ransomware attack in June 2024 [1]. Reports attributed the attack to the Cicada3301 ransomware group and described the exfiltration and subsequent leak-site publication of a large volume of sensitive data [1]. ACN recommends that healthcare organizations implement robust security practices and centralized cybersecurity governance [2].
This event has not been officially confirmed. Content is based on media or third-party reports.
Backfill: this event became public on Jun 6, 2024 and we added it on Nov 8, 2026. It is not a new event.
HighMonitoringBackfillMedia reported
Italian Healthcare Organization ASST Rhodense Hit by Ransomware Attack
1 min read
- Disclosed
- Jun 6, 2024
- Published
- Nov 8, 2026
- Last updated
- Nov 11, 2026
- CVSS basis
- Our assessment
- Attack vector
- Actor type
- Motivation
On this page
30-second summary
What happened
Who is affected
Industries mainly affected: Healthcare
What to do nowOur advice
- Healthcare organizations should implement robust security practices and centralized cybersecurity governance [2].
Timeline
- Incident publicly disclosed[1]
Technical details
Source-Supported Details
Media outlets reported that ASST Rhodense was attacked between June 5 and June 6, 2024, affecting facilities in Garbagnate Milanese, Bollate, Rho, and Passirana. Attribution to Cicada3301 is retained in this advisory because it is explicitly named in the cited sources [1].
Source excerpt: "Uno dei casi più documentati del 2024 è l’attacco subito dall’ASST Rhodense. Tra il 5 e il 6 giugno 2024, l’ASST Rhodense è stata colpita da un attacco rivendicato dal gruppo cybercriminale Cicada3301, che ha portato all’esfiltrazione di 1 TB di dati sensibili." [1].
Source excerpt: "Dal gennaio 2023, si contano in media 3,5 attacchi informatici al mese contro strutture sanitarie, metà dei quali sfociano in incidenti gravi che compromettono la disponibilità e la riservatezza dei servizi, mettendo a rischio la privacy dei pazienti." [2].
References
Official / primary1
- [2]
“Dal gennaio 2023, si contano in media 3,5 attacchi informatici al mese contro strutture sanitarie, metà dei quali sfociano in incidenti gravi che compromettono la disponibilità e la riservatezza dei servizi, mettendo a rischio la privacy dei pazienti.”
Media1
- [1]
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.