Studio Sardano Data Breach

Studio Sardano, an Italian consumer services company, has been named as a victim by the AiLock ransomware group. The listing was published on July 7, 2026, and was identified by SOCRadar’s threat intelligence monitoring. This incident adds Italy to AiLock’s list of targeted countries, with the group primarily focusing on healthcare, consumer services, and business services sectors.

SOCRadar’s investigation found no direct exposure of Studio Sardano’s domain in their stealer-log telemetry for the relevant period. However, this does not fully exonerate the company, as the search was limited to specific datasets and recent activity. The article emphasizes that credentials harvested through other means, such as personal email aliases or through logs not yet indexed, could still represent an initial access vector for ransomware groups like AiLock. The analysis suggests that infostealer logs are a common method for threat actors to gain initial access, enabling them to compromise systems and deploy ransomware. Threat intelligence teams are advised to maintain vigilance and proactive credential hygiene measures, rather than considering a null query as proof of security.

Disclaimer

This report is intended for threat intelligence and security awareness purposes. SOCRadar does not host, redistribute or buy stolen data. All breach information reported here is collected from publicly accessible threat actor and ransomware portals. This content is intended to equip CTI teams with context around recent attacks. While we strive for accuracy, listings on ransomware leak and extortion sites cannot always be independently verified and may not reflect confirmed breaches. If you believe any data in this report is incorrect, please contact us.