INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Thegentlemen Publishes New Victim Spontini

| 2026-10-31 07:35 CRITICAL LOW RANSOMWARE & EXTORTION
JSON
Executive Summary
AI-generated
A ransomware attack targeting Spontini, a Milanese pizza by the slice chain with 27 stores in Italy and 15 more across 10 countries including Japan, Qatar, and Saudi Arabia, has been reported. The attackers are believed to be behind an exfiltration operation using ransomware tactics, specifically targeting retail sector entities like Rodolfi, which supplies Molini Certosa flour used by Spontini. The attack is thought to have affected around 800 employees of the company, with revenue estimated at approximately €30 million annually. Spontini serves over 2.4 million pizza slices per year using unchanged recipes and 100 percent Italian ingredients like Rodolfi tomatoes.
Technical Mitigations AI-generated
• Block DNS records for spontinimilano.com to prevent further exploitation. • Monitor the domain for any suspicious activity related to the Tonda 1953 frozen pizza line produced with SanNico Food. • Detect and hunt for indicators of a potential ransomware attack, such as unusual network traffic patterns or malware signatures associated with the Spontini group.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
MilanMilan
Target & Sectors
GCC GCC aviationaviation retailretail
Incident Timeline
‎2026/10/31
Thegentlemen has published a new victim, Spontini.
organisation Malpensa
Revenue has grown to roughly 30 million euro with over 800 employees, driven by expansion into travel locations like Milan Central station and Malpensa airport.
financial 30 euro
Revenue has grown to roughly 30 million euro with over 800 employees, driven by expansion into travel locations like Milan Central station and Malpensa airport.
victims 800 employees
Revenue has grown to roughly 30 million euro with over 800 employees, driven by expansion into travel locations like Milan Central station and Malpensa airport.
organisation Rodolfi
It serves around 2.4 million pizza slices a year using an unchanged 1953 recipe with 100 percent Italian ingredients like Molini Certosa flour and Rodolfi tomatoes.
organisation SanNico Food
In 2026 the brand entered retail with a frozen pizza line called Tonda 1953 produced with SanNico Food.
organisation DNS
The following DNS records were found for the victim's domain.
Tactical Metrics
Metrics
financial
30,000,000
Euro
Revenue has grown to roughly 30 million euro with over 800 employees, driven by expansion into travel locations like Milan Central station and Malpensa airport.
Metrics
victims
800
Employees
Revenue has grown to roughly 30 million euro with over 800 employees, driven by expansion into travel locations like Milan Central station and Malpensa airport.
Intelligence Sources
Ransomware Live 2026-10-31