Incident Score: Analysis & Impact (CALADS1781691953)

In this Rankiteo incident briefing, we review the Autorità di Sistema Portuale del Mare Adriatico centro settentrionale breach identified under incident ID CALADS1781691953.

The analysis begins with a detailed overview of Autorità di Sistema Portuale del Mare Adriatico centro settentrionale's information like the linkedin page: https://www.linkedin.com/company/adspmacs, the number of followers: 4676, the industry type: Government Administration and the number of employees: 111 employees

After the initial compromise, the video explains how Rankiteo's incident engine converts technical details into a normalized incident score. The incident score before the incident was 759 and after the incident was 630 with a difference of -129 which is could be a good indicator of the severity and impact of the incident.

In the next step of the video, we will analyze in more details the incident and the impact it had on Autorità di Sistema Portuale del Mare Adriatico centro settentrionale and their customers.

On 01 January 2026, Adriatic Port Authority (Autorità di Sistema Portuale del Mare Adriatico Centrale) disclosed Ransomware issues under the banner "Anubis Ransomware Attack Disrupts Adriatic Port Authority, Exposing Critical Infrastructure Vulnerabilities".

In a high-profile cyberattack, the Anubis ransomware group targeted the Adriatic Port Authority (Autorità di Sistema Portuale del Mare Adriatico Centrale), which oversees Italy’s Port of Ancona, disrupting maritime logistics and exposing systemic risks in critical transportati...

The disruption is felt across the environment, affecting Cargo tracking, Shipping schedules and Customs processing, and exposing Contracts, employee records, plus an estimated financial loss of Millions in economic losses.

In response, moved swiftly to contain the threat with measures like Isolating affected systems, and began remediation that includes Restoring data from backups.

The case underscores how teams are taking away lessons such as The attack highlighted the growing threat to cyber-physical sectors, where IT breaches can disrupt physical operations. It underscored the attractiveness of ports as targets due to digitalization, interconnected logistics platforms, and often weak cybersecurity defenses. Aging infrastructure, limited cybersecurity maturity, and IT-OT convergence create high-value opportunities for cybercriminals.

Finally, we try to match the incident with the MITRE ATT&CK framework to see if there is any correlation between the incident and the MITRE ATT&CK framework.

The MITRE ATT&CK framework is a knowledge base of techniques and sub-techniques that are used to describe the tactics and procedures of cyber adversaries. It is a powerful tool for understanding the threat landscape and for developing effective defense strategies.