Ordine Degli Psicologi Della Lombardia Listed by noescape Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On 30 September 2023, the Ordine Degli Psicologi Della Lombardia appeared on a ransomware leak site operated by the group known as noescape. The listing claims the organisation’s systems were encrypted and that internal files were taken. For psychologists registered with the Order, and for anyone whose personal or professional details sit in its records, the practical question is straightforward: what information may now be outside the organisation’s control, and what steps make sense while the full picture remains limited.

Public detail is sparse. The number of people affected is unknown, and the precise contents of the taken files have not been independently confirmed. What is known comes chiefly from the group’s own claim that more than 5 GB of material was involved and that management had not been in contact. That claim alone is enough to warrant careful attention from those who interact with the Order.

Breaking down the breach

According to the leak-site entry dated 30 September 2023, noescape stated that the Ordine Degli Psicologi Della Lombardia “was successfully encrypted and compromised.” The group added that management had not contacted them and warned that “more than 5GB” of data was at issue. The only data description supplied in the available record is “internal files exfiltrated in ransomware attack.” No independent confirmation of the encryption event, the volume of data, or the exact files has been published in the material provided. Timing beyond the report date, the initial access method, and the scale of any operational disruption remain undisclosed.

In short, the incident is publicly visible only through the group’s listing. Whether negotiations occurred, whether any data was later released, and whether the organisation issued its own notice are not part of the facts at hand.

The group behind it: noescape

noescape is a ransomware operation that emerged in the public eye in mid-2023 after the collapse of the larger Conti ecosystem. Like many groups in that lineage, it has practised double extortion: encrypting systems while also copying data, then threatening to publish the stolen material on a dedicated leak site if payment is not made. The group has typically posted victim names, short descriptions, and countdown timers, sometimes accompanied by sample files. Its public communications frequently emphasise that it will release data when it receives no response from the victim organisation.

These patterns are well-documented across multiple incidents. They do not, however, prove any specific action against the Ordine Degli Psicologi Della Lombardia beyond the claim recorded on the leak site. The listing itself should be treated as an unverified assertion by the actors involved.

About Ordine Degli Psicologi Della Lombardia

The Ordine Degli Psicologi Della Lombardia is the professional regulatory body for psychologists practising in the Lombardy region of Italy. Like other Italian ordini professionali, it maintains registers of qualified practitioners, handles licensing and disciplinary matters, and holds correspondence and records necessary for those functions. Such bodies routinely process identity data, contact details, professional qualifications, and sometimes sensitive case-related or health-adjacent information tied to complaints or fitness-to-practise proceedings.

A breach affecting a professional order is consequential because the data it holds is both personal and occupational. Compromised records can affect not only the psychologists themselves but also members of the public who have interacted with the Order in any official capacity. Trust in the confidentiality of professional oversight is part of the sector’s foundation; any confirmed exposure therefore carries institutional as well as individual weight.

The information in question

The available facts state only that “internal files” were exfiltrated. No inventory of document types, no confirmation of member databases, and no list of personal-data categories have been supplied. Organisations of this kind typically hold registration records, identity and contact information, professional credentials, fee and payment data, and internal administrative files. Some may also retain correspondence linked to ethical complaints or continuing-education records. Because the exact contents remain unconfirmed, it is not possible to state which of these categories, if any, were included in the material the group claims to possess.

Readers should therefore treat any assertion about specific data elements as speculative until the organisation or a competent authority provides a verified account.

What's at stake

For individuals, the concrete risks centre on misuse of personal and professional information. Even a limited set of internal files can enable targeted phishing, identity fraud, or reputational harm if registration or disciplinary material is involved. For the Order itself, the stakes include operational disruption, regulatory scrutiny under European data-protection rules, and the longer task of restoring confidence among registrants and the public.

• Possible exposure of identity and contact details of registered psychologists.
• Risk that administrative or complaint-related correspondence could be misused.
• Phishing or social-engineering attempts that reference the Order’s real processes.
• Uncertainty for anyone who has submitted documents or personal data to the organisation.
• Institutional obligations to investigate, notify where required, and remediate.

None of these outcomes is confirmed by the present record; they are the ordinary consequences that follow when a professional body is named in a ransomware claim involving internal files.

Were you affected?

If you are a psychologist registered in Lombardy, or if you have ever supplied personal information to the Ordine Degli Psicologi Della Lombardia, treat the claim seriously while recognising that public detail is still limited. Practical first steps include monitoring official communications from the Order, reviewing account statements and professional correspondence for unusual activity, and being alert to unsolicited messages that reference registration status, fees, or disciplinary matters. Consider placing fraud alerts where appropriate and updating passwords on any accounts that may have shared credentials or recovery information with the Order.

You can also run a free exposure scan of your email address to check whether your information has already surfaced in known breach data sets. That check does not confirm involvement in this specific incident, but it can indicate whether your details appear elsewhere and help you prioritise further protective measures.

AICompiled with AI assistance from public sources and published under our editorial standards.