Gruppo Spaggiari Parma | 6.1 TB of PII | $50k

Hello hello! Many of you may have seen our clash with Spaggiari, especially if you're Italian (we made news), but if you saw said news you would know that Spaggiari are downplaying our breach and trying to say it didn't happen, so...



Gruppo Spaggiari Parma | 6.1 TB of PII | Tax Documents, Diplomas, Driving Licenses, National IDs, etc

This is a humongous breach, and we are making an example of them for how they handled it. You can download the samples here directly: http://2kieaq6jnwgrru62wwtxaafg35q6rzweg.../spaggiari

The data there is as follows: BANK_TAX, CODICE_FISCALE_DOC, CV_APPLICATION, DIPLOMA_CERT, DRIVERS_LICENSE, EMAIL_NOTIFICATION, ID_CARD, ISEE_INCOME, MEDICAL_CERTIFICATE, PEDIATRIC_MEDICAL, PRESCRIPTION, REPORT_CARD, VACCINE, two of each kind, plus an additional 100 files mix we sent Spaggiari in our initial email. However, this is not every data type included, there's more.

This is just a pure document dump, PII and documents of millions, enough to build a single persons entire life picture from (tested, by the way, see bottom for proof)
If you do fraud, this is goldmine! Not only can you open 12 loans in someones name because of the financial documents, you can also larp as them because there's a good chance their pairing ID is here.

Some in-line samples without downloading:








Price is $50k USD, if you are contacting actually have the money, timewasters will be ignored, enough time has been wasted trying to negotiate with this godawful company

Tox: 300B2D5FD09996D9DCFD714A3E7C0059EF70825AF78ED544880DC9990EBF9859B798CC8F2B03
Session: 05c8ae06e40a63cfd94d3307a3461ca668aa88bb18686083d6927e969249501075

On why, here's Spaggiari's response to our breach, translated: "Perimeter of the event. Cyber-forensic investigations were launched immediately. Based on the technical analysis carried out so far, the perimeter concerned is the Smart Modules component of the Bergantini platform, used for the online compilation and transmission of forms and instances. The investigations carried out exclude that the event covered the register, the school management and management software of the Spaggiari Parma Group secretariat, which constitute a separate and separate system. Some publicly disseminated reconstructions attribute the event to other platforms: these attributions are not confirmed in the results of the analyses carried out." Seems like a non-answer to us

Proof on the claim further up in post, on a guy named Alabastro Alfonso:
- he is born in 10/10/1995
- residence of the francolise region
- 1.80MT tall
- 3 previous teaching jobs
- Number of (+39) 3295482231
- Address of Via Michele Marigliano, 22, E81050 Francolise, Italia
- Email of alabastroalfonso@gmail.com
- Tax Code of LBSLNS95R10B963H
- Signature
- Was in the country of Russia between 08/08/2013 – 12/09/2013

He isn't anyone notable, this is just to prove the point. Sorry Alabastro!