Ransomware: qilin claims Retelit SpA PIVA (IT) — Telecommunication

On July 11, 2026, a ransomware group known as Qilin publicly claimed responsibility for a cyberattack against Retelit SpA, an Italian telecommunications company. The incident was published on the ransomware group’s leak site, indicating that data exfiltration may have occurred. This event falls under the BREACH framework, which typically requires mandatory notification to supervisory authorities and affected individuals under EU data protection law.

The primary affected organization is Retelit SpA, operating in the telecommunications sector in Italy. However, given the interconnected nature of telecom infrastructure, downstream clients, business partners, and any individuals whose personal data may have been compromised are also impacted. Compliance teams across the EU, particularly in critical infrastructure and telecom sectors, should treat this as a high-priority incident.

Compliance teams should immediately verify whether their organization has any data-sharing or service agreements with Retelit. If so, they must assess potential data exposure and prepare for possible breach notifications under GDPR. Additionally, teams should review their own ransomware preparedness, including offline backups, incident response plans, and employee training. Finally, monitor official communications from the Italian Data Protection Authority (Garante) for further guidance or enforcement actions.