Italy investigates data leaks

In Italy, the online publication of personal phone numbers linked to high-ranking officials, including the President of the Republic and the President of the Council of Ministers, triggered an investigation by the Procura di Roma and the Garante per la protezione dei dati personali. The data may have come from lead generation platforms and data enrichment services, though no evidence of a system compromise was found by the Italian National Cybersecurity Agency.

Portugal reports official data exposure

In Portugal, the exposure of mobile phone numbers, email addresses, private residences, and other information related to government officials, the President of the Republic, judges, police officers, and the head of the Portuguese intelligence services was reported by Expresso and ECO on July 30, 2026. Investigations were initiated by intelligence services and the Polícia Judiciária.

Spain faces similar data dissemination

Spain experienced a similar issue, with RTVE reporting that personal data, including phone numbers, identity documents, residences, and email addresses of members of the Spanish government and former officials of the Partido Popular were disseminated on Telegram. This incident highlighted how the combination of data points can facilitate social engineering or targeted phishing operations.

Germany deals with intercepted military communication

In Germany, a different scenario emerged in March 2024, when a conversation between high-ranking military officials of the Luftwaffe discussing the supply of Taurus missiles to Ukraine was intercepted and disseminated by Russian media. The German Ministry of Defense confirmed the incident, attributing it to an error in the access conditions for the meeting.

Broader security challenges highlighted

These incidents collectively highlight the broader issue of securing communications and data, emphasizing that encryption alone is insufficient. The security of a communication depends on various factors, including the terminal used, the authentication process, the application, the network, and the procedures in place.

Need for comprehensive security measures

The exposure of personal data can serve as a starting point for more targeted information collection, and operational errors can directly lead to the compromise of sensitive communications. The incidents underscore the need for a comprehensive security architecture that protects not only the content of messages but also the environment in which they are created and transmitted.