According to the numbers from the latest report from the Crif Observatory, in the first six months of 2026, 2.5 billion new unique data were exposed on the dark web. This is information, capable of providing increasingly complete details on users, which is often used for scams and scams. This data, therefore, represents a valuable resource for cybercriminals and helps them make scams, phishing attempts and identity theft more effective.
The Crif Observatory is responsible for analyzing the vulnerability of people and companies to cyber attacks and the main trends relating to data exchanged in open web and dark web environments. According to experts, the threat recording the most worrying growth concerns data stolen via infostealer malware: in fact, the spread of stealer-as-a-service, i.e. malware capable of acquiring a large amount of data and contextual information from infected devices, continues.
But the most widespread cyber attacks, even in this first part of 2026, also include phishing, smishing, vishing and spear phishing campaigns. Added to these threats are attacks based on artificial intelligence, which use increasingly realistic audio and video deepfakes. At the company level, also pay attention to emails that are difficult to distinguish from authentic communications.
As mentioned, the use of infostealer malware is growing to steal data and information via the web: these are malware that spread mainly through phishing campaigns and counterfeit software and - once the device has been infected - work silently, plundering data and collecting credentials and other information. The collected data, explains the report, are then distributed on the dark web in ULP archives (Url, Login and Password) or in more complete collections, which contain information on the victim and the compromised device.
The Observatory's report shows that Italy is among the states most affected by cyber attacks. Our country is third in the world, after the United States and France, for the number of accounts stolen and spread on the dark web via infostealer malware.
Not only that: in the first half of 2026, Italy is in sixth place in the world and fourth in Europe for the number of email addresses compromised and spread on the dark web. The United States, Russia and Germany are placed on the world podium.
Furthermore, Italy is in 22nd place in the world - which becomes sixth in Europe - for the number of data in circulation linked to credit cards. Furthermore, we are in 51st place in the world - but 16th considering only Europe - for exposed telephone numbers (key element in many scams). All data which, therefore, confirms how Italy is a primary target for cyber attacks and online scams.
Speaking of alerts, the Observatory also draws an identikit of the Italians most involved in the attacks. In fact, among the Italian private users notified by Crif protection services, the age groups most affected are 51-60 years (26.7%), 41-50 years (26.6%) and over 60s (20.3%). Furthermore, men represent the majority of alerted users, with 64.3%. Looking at the regions, those with the highest number of alerts are Lombardy (15.7%), Lazio (12.3%), Sicily (11.3%), Emilia-Romagna (9.7%) and Piedmont (9.5%).
"Protecting your personal data is more important today than ever", is the invitation of Beatrice Rubini, Executive Director of Crif. "Online frauds - he added - are increasingly sophisticated and credible, thanks to tools also based on Artificial Intelligence such as deepfakes, personalized phishing and advanced social engineering techniques that exploit personal information often found online or coming from data breaches. In this scenario, personal awareness represents the first line of defence. We continue to promote the culture of digital security, supporting citizens and consumers in protecting their identity and adopting conscious behavior to recognize and prevent new cyber threats".
