2.5 billion data records exposed on dark web in Italy in H1 2026
CRIF's Cyber Observatory reported that 2.5 billion data records were exposed on the dark web in the first half of 2026, with cybercriminals using AI-powered techniques including deepfakes and personalized phishing to conduct sophisticated fraud. Italy ranks among the top countries globally for compromised email addresses and accounts, with 32.3% of Italian users receiving security alerts.
What happened
In the first half of 2026, 2.5 billion unique data records were exposed on the dark web, according to CRIF's Cyber Observatory. These records contain comprehensive personal information that cybercriminals can use to construct detailed victim profiles.
Cybercriminals are increasingly using AI-powered techniques including deepfake audio and video, personalized phishing, and advanced social engineering to carry out fraud. Stealer-as-a-service malware continues to distribute stolen data, with Italy ranking third globally for compromised accounts.
Reported impact
Italy ranks 4th in Europe and 6th globally for compromised email addresses exposed on the dark web. The country ranks 6th in Europe and 22nd globally for credit card data in circulation.
32.3% of Italian users received at least one security alert. Lombardy, Lazio and Sicily were the regions most affected by these exposures.
Index analysis
The exposed data provides cybercriminals with resources to execute more effective phishing, smishing, vishing, spear phishing and identity theft attacks. The availability of comprehensive personal data profiles increases the sophistication and credibility of AI-assisted fraud schemes.
Classification
Sources and evidence
Sources not yet published
This record was researched and written by the Index from original reporting. Its sources are still being verified by an editor, and they are listed here once that check is complete. Until then the record carries no reviewer.