Italy fines WINDTRE €1.7 million after two customer data breaches

Italy's data protection authority, the Garante per la Protezione dei Dati Personali, fined telecom operator WINDTRE €1.7 million after finding serious security shortcomings that enabled two separate breaches in 2025. The incidents affected personal data belonging to more than 365,000 customers, making this a large-scale privacy and cybersecurity case. According to the regulator, the attackers did not rely on advanced malware or a software flaw; instead, they used social engineering by impersonating support technicians. That detail matters because it shows how weak identity checks and help-desk procedures can be enough to open the door to major data exposure. The case is also notable as a regulatory enforcement action in a critical communications sector, underscoring that privacy failures can carry substantial financial and reputational consequences. For organizations in Switzerland and the wider Italophone region, it is a reminder that process hardening and staff verification are as important as technical defenses.

Source: Help Net Security