STUDIO NOTARILE BUCCI – OLMI Listed by everest Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On 17 July 2024 the ransomware group known as everest publicly listed STUDIO NOTARILE BUCCI – OLMI on its leak site. The group claims it has exfiltrated 400 GB of internal files from the Italian notarial practice and has given the organisation three days to make contact according to its instructions. The number of people whose information may be involved remains unknown, and independent confirmation of the intrusion or the precise contents of the data has not been published.

Because notarial offices routinely handle highly sensitive personal and legal records, any confirmed compromise carries clear consequences for clients and counterparties. Public detail is still limited to the group’s own claims; the following account therefore sticks strictly to what has been reported and to established background on the actor and the sector.

What happened

According to the listing dated 17 July 2024, everest asserts that it conducted a ransomware attack against STUDIO NOTARILE BUCCI – OLMI and removed 400 GB of internal files. The group’s message states that the company “must contact us using the instructions in next 3 days” and supplies the organisation’s website address. No further technical details—such as the initial access vector, the ransomware variant used, or whether systems were encrypted—have been disclosed in the public record. The volume of data and the three-day deadline are presented solely as claims by the group; they have not been independently verified. The number of individuals potentially affected is listed as unknown.

Who is everest?

Everest is a ransomware operation that has been active for several years and is known for double-extortion tactics. After gaining access to a network, the group typically exfiltrates data before encrypting systems, then threatens to publish the stolen material on a dedicated leak site if a ransom is not paid. Listings on that site serve both as pressure on the victim and as advertising to other potential targets. Everest has previously claimed responsibility for attacks against organisations in multiple sectors and jurisdictions; its public communications usually consist of brief victim notices, data-volume figures and contact deadlines, matching the format used in the STUDIO NOTARILE BUCCI – OLMI listing. The group’s statements about any specific victim remain unverified claims until corroborated by the organisation itself or by independent investigators.

STUDIO NOTARILE BUCCI – OLMI and its sector

STUDIO NOTARILE BUCCI – OLMI is an Italian notarial practice. Notaries in Italy are public officers who authenticate deeds, wills, property transfers, company formations and other legal instruments that require formal legal certainty. In the course of that work they collect and retain extensive personal data—identity documents, financial records, property titles, family and inheritance information—as well as confidential commercial documents. Because these records often form the legal foundation of ownership, succession and contractual rights, a breach at a notarial office can affect not only the firm’s own operations but also the privacy and legal security of clients, heirs and business partners. The practice’s website domain is publicly associated with the listing, claiming the identity of the named organisation.

What was likely exposed

The only data type named in the available report is “internal files” said to total 400 GB. No inventory of file categories, no sample documents and no confirmation of whether personal data, client files or system backups were included have been released. Organisations of this type ordinarily hold scanned identity documents, property deeds, wills, powers of attorney, financial statements and correspondence containing names, addresses, tax codes, bank details and family relationships. Whether any of those categories were among the 400 GB claimed by everest remains unconfirmed. Public detail on the exact contents is therefore limited to the group’s assertion that internal files were exfiltrated.

The real-world impact

If the claimed data set includes client records, individuals could face risks of identity fraud, unauthorised property transactions, or misuse of inheritance and financial information. Even purely internal administrative files can contain credentials, contact lists or draft documents that facilitate further social-engineering attacks. For the notarial practice itself, the incident may disrupt day-to-day operations, trigger regulatory notification duties under European data-protection rules, and require costly forensic and recovery work. Because the number of affected people is unknown and the precise data types unconfirmed, the scale of personal harm cannot yet be quantified; the potential for long-term privacy and legal consequences, however, is inherent to the nature of notarial records.

If your data was in this claimed breach

Anyone who has used the services of STUDIO NOTARILE BUCCI – OLMI should treat the possibility of exposure seriously until more information emerges. Practical first steps include monitoring bank and credit accounts for unusual activity, reviewing any recent property or inheritance paperwork for signs of misuse, and enabling multi-factor authentication on email and financial accounts. If you receive unexpected requests for personal documents or payments that appear to reference the firm, verify them through a known official channel rather than replying directly. Readers can also run a free exposure scan of their email address to check whether that address has already appeared in other known breach data sets; such a scan does not confirm involvement in this specific incident but can indicate whether additional protective measures are warranted.

AICompiled with AI assistance from public sources and published under our editorial standards.