INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Thegentlemen Publishes New Victim

| 2026-10-31 07:25 CRITICAL LOW RANSOMWARE & EXTORTION
Executive Summary
AI-generated
Some Srl, an Italian ERP and financial systems consulting company based in Milan, has been targeted by a ransomware attack. The incident occurred approximately 25 years ago, with the identified entity being ENI Congo, an oil company operating primarily in Africa and Europe. The targeted sectors include health, manufacturing, energy, and hospitality, with some.it serving international hotel chains, oil companies like ENI Congo, and mid-size manufacturers. The attackers employed exfiltration and ransomware tactics, affecting 22 employees at the company. The attack resulted in a financial loss of €2.8 million, with over 100 implementations completed across Europe and Africa prior to the incident.
Technical Mitigations AI-generated
• Reset credentials and API keys that may have been exposed, and review access logs for the affected accounts or integrations.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
MilanMilan
Target & Sectors
EUROPE EUROPE AFRICA AFRICA healthhealth hospitalityhospitality energyenergy manufacturingmanufacturing
Incident Timeline
‎2026/10/31
Some.it, an Italian ERP and financial systems consulting company, was indexed by a platform tracking publicly visible information posted by ransomware operators.
organisation ENI Congo
victims 22 employees
financial 2.8 euro
organisation Epicor Kinetic
organisation ERP
organisation DNS
Tactical Metrics
Metrics
victims
22
Employees
Metrics
financial
2,800,000
Euro
Intelligence Sources