Ransom! galileo.it

The threat actor incransom has claimed to have infiltrated the Galileo platform, a leading global payments provider in Italy that facilitates fintech, financial services, and digital banking solutions. The attack raises concerns over the security of the platform’s financial technology infrastructure in Italy. #Italy

Incident Details

  • Victim: galileo.it
  • Country: IT
  • Actor: incransom
  • Source: http://incblog6qu4y4mm4zvw5nrmue6qbwtgjsxpw6b7ixzssu36tsajldoad.onion/blog/disclosures/69146fdce1a4e4b3ffc8129a
  • Discovered: 2025-11-12 11:47:58.601762
  • Published: 2025-11-12 10:10:00.000000

Information

  • Galileo is a global payments platform that supports fintech, financial services, and investment firms by simplifying payments.
  • The platform is a proven financial technology solution, serving as an innovation engine and leader in card issuing, payments, and digital banking.
  • Founded in 2000 and headquartered in Utah.

Disclaimer: This post is based on public claims made by the ransomware group "incransom". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.

monitored by: ransomware.live