The threat actor incransom has claimed to have infiltrated the Galileo platform, a leading global payments provider in Italy that facilitates fintech, financial services, and digital banking solutions. The attack raises concerns over the security of the platformβs financial technology infrastructure in Italy. #Italy
Incident Details
- Victim: galileo.it
- Country: IT
- Actor: incransom
- Source: http://incblog6qu4y4mm4zvw5nrmue6qbwtgjsxpw6b7ixzssu36tsajldoad.onion/blog/disclosures/69146fdce1a4e4b3ffc8129a
- Discovered: 2025-11-12 11:47:58.601762
- Published: 2025-11-12 10:10:00.000000
Information
- Galileo is a global payments platform that supports fintech, financial services, and investment firms by simplifying payments.
- The platform is a proven financial technology solution, serving as an innovation engine and leader in card issuing, payments, and digital banking.
- Founded in 2000 and headquartered in Utah.

Disclaimer: This post is based on public claims made by the ransomware group "incransom". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.