Cybercriminal Group Claims Massive Data Breach at Italian Education Tech Provider The cybercriminal group xpl0itrs has alleged a major breach of Gruppo Spaggiari Parma, a key technology provider for Italy’s educational system, claiming to have stolen 6.1 TB of data from over 3,000 schools. The breach, reported by threat monitoring platform Hackmanac on Thursday, reportedly includes personal data of students and teachers, medical records, identity details, and contact information. While the attack has not been independently verified nor have the claimed data volume or categories been confirmed the incident underscores the growing targeting of educational institutions by cybercriminals. Schools and their vendors store vast amounts of sensitive data, much of which retains value for years, making them prime targets. Gruppo Spaggiari Parma develops digital platforms like ClasseViva, an ecosystem used to manage academic and administrative processes across Italian schools. The concentration of data in such providers means a single breach could impact thousands of institutions, amplifying the risks of digitalization in education. Beyond grades, schools often hold assessment results, addresses, financial details, disciplinary records, and medical data information that, when combined, enables sophisticated phishing, social engineering, or identity theft. For minors, compromised data can remain exploitable for extended periods, increasing long-term risks. The incident highlights the vulnerabilities of centralized educational platforms and the far-reaching consequences of a single breach.