Italy Databases Super Pack

Data Breach Summary

In March 2025, InsecureWeb uncovered a substantial data leak involving the “Italy Databases Super Pack 35 DB”, exposing over 685MB of sensitive user data. The breach was first spotted on the dark web forum LeakBase.io, where a user under the alias frog shared the data. The leak contains a wide range of compromised databases, including some from major Italian companies such as onlinestore.it, farmaciasaltarelli.it, and giustizia.it.

This breach demonstrates the ongoing threat posed by unsecured databases and highlights the urgent need for organizations to reinforce their cybersecurity protocols to prevent unauthorized access.

This leak has drawn serious attention due to the scale and sensitivity of the information disclosed, which includes customer and business documents, financial records, and personal identification data.

Where and How?

The exposed data was found circulating on LeakBase.io, a dark web marketplace known for trafficking stolen information. Among the files leaked are database backups, user lists, and compressed SQL exports from several high-profile Italian companies. One of the largest files includes user data from onlinestore.it, reportedly affecting over 1.38 million users. Other notable leaks include farmaciasaltarelli.it (13,000 users) and a large database allegedly belonging to an eyewear company with data on over 1 million users worldwide.

These files contain sensitive personal information that could be exploited for identity theft, phishing, or other forms of cybercrime. The presence of these files in compressed and structured formats such as .sql, .csv, and .7z suggests the data was extracted directly from backend systems with little to no obfuscation.

Company Data Breach History

Some of the affected domains—like giustizia.it, a government-related site—raise serious concerns about data oversight and infrastructure security in both public and private sectors. While onlinestore.it and farmaciasaltarelli.it have no publicly reported prior breaches, this incident may prompt further investigation into their data protection practices. Given the scale and sensitivity of the leak, companies involved should conduct internal audits and collaborate with cybersecurity experts to identify any prior compromises that may have gone undetected.

Further Action

InsecureWeb strongly advises the affected entities to:

• Conduct a full-scale forensic investigation to determine the point of compromise.
• Notify all impacted users and regulators as per GDPR requirements.
• Reinforce access controls and encryption standards.
• Monitor for suspicious activity on all exposed accounts and systems.

Transparent communication with users is essential to maintain trust and limit the potential damage caused by this exposure.

Recommendations for Personal Data Protection

How Users Can Protect Their Information
To safeguard personal information and accounts, users should consider the following steps:

• Change Passwords Regularly: Use strong, unique passwords combining letters, numbers, and symbols.
• Enable Two-Factor Authentication (2FA): Whenever possible, activate 2FA to add an extra layer of security to accounts.
• Use Unique Passwords for Each Account: Avoid reusing passwords across different platforms to prevent multiple account compromises.
• Be Cautious of Phishing Attempts: Stay vigilant against suspicious emails or messages that may contain malicious links or solicit personal information.
• Monitor Accounts for Unusual Activity: Regularly review account statements and activities to detect and respond promptly to unauthorized actions.

By adopting these practices, users can enhance their personal data security and reduce the risk of unauthorized access to their information.

What is InsecureWeb?

InsecureWeb is a Dark Web monitoring service that keeps track of recent data breaches and tracks their impact by monitoring the darkest places of the internet.

Our commitment lies in providing top-notch cybersecurity services to our clients. Through continuous monitoring of the dark web and advanced threat detection methodologies, we strive to identify potential breaches promptly, enabling swift response and mitigation efforts. With our state-of-the-art tools and expertise, we prioritize the confidentiality, integrity, and availability of our clients’ data.