Circuit Wire — a daily news update from the Circuit.
Prosecutors in Rome opened an investigation on Monday, November 9, after the pro-Russian hacker group NoName057(16) posted personal details of 18 European officials and journalists on a dark web site and offered payment for more, The Record reported.
The list includes Italian Foreign Minister Antonio Tajani, Rome's chief prosecutor Francesco Lo Voi and Ivano Gabrielli, head of Italy's Postal Police. It also names Eurojust President Michael Schmid, Edvardas Šileris, who runs Europol's European Cybercrime Centre, and Holger Münch, president of Germany's Federal Criminal Police Office. Paolo Tassan-Zanin, the mayor of Aviano, a Frankfurt prosecutor and three German investigative journalists also appear.
The page is called "Tribunal" and can only be reached through the Tor network, Il Sole 24 Ore reported. It brands the 18 people "enemies of the Russian Federation" and lists email addresses, phone numbers, Telegram accounts and social media profiles. The Record said home addresses appear in some cases. The group is offering cryptocurrency for further details on the targets or their relatives.
Italy's ANSA news agency reported that investigators are looking at possible unauthorized access to a computer system and threats. The case is being handled by Cnaipic, Italy's national anti-cybercrime center for critical infrastructure. Because Lo Voi is Rome's chief prosecutor, the part of the case involving him will move to prosecutors in Perugia. ANSA said the data had been online for at least two weeks before the inquiry opened.
Tajani said he would not be intimidated and raised the issue with G7 foreign ministers meeting in Paris this week. He described the hackers as pro-Russian but said he was not accusing the Russian government. The Russian Embassy in Italy dismissed the allegations.
Several of the agencies on the list have moved against the group before. In July 2025, Europol and Eurojust coordinated an operation with authorities from 12 countries that took more than 100 of the group's servers offline. The Record said the doxxing appears to be retaliation for that operation. NoName057(16) is best known for denial of service attacks, using volunteers it recruits through Telegram. Italy's Foreign Ministry website was hit by such attacks on October 8.
Russia denies any involvement with the group.
Want a weekly roundup of the major stories shaping the security industry? The On The Circuit newsletter is read by more than 12,000 protection professionals.
Spotted something we should cover? Send tips and feedback via circuit-magazine.com.