STUDIO NOTARILE BUCCI – OLMI Listed by everest Ransomware Group

On July 17, 2024, the Italian notary firm Studio Notarile Bucci – Olmi appeared on the leak site of the Everest ransomware group. The listing states that internal files totaling 400 GB were exfiltrated during a ransomware attack and warns that the company must contact the attackers using their provided instructions within 3 days or face public release of the data. The notification does not specify the exact number of individuals whose records were taken.

Details from the Leak Site

The Everest leak page lists the victim as studionotarilebucciolmi.it and describes the incident as a successful ransomware operation that resulted in both encryption and data theft. It explicitly claims 400 GB of internal files were stolen and sets a short deadline for the firm to negotiate. No sample data files are currently posted, and the listing does not detail the categories of information contained in the archive. Public reporting on Everest indicates the group follows a double-extortion model: they demand payment to prevent both the restoration of encrypted systems and the publication of stolen documents.

Why This Matters for You and Your Family

Notary offices in Italy routinely handle highly sensitive personal documents including wills, property deeds, marriage contracts, inheritance records, and company formation papers. If your family has used this studio for any legal or real-estate matter in recent years, your full name, address, tax code, bank details, and family relationships may be inside the 400 GB archive. Even though the victim count is unknown, a single compromised notary file can expose multiple generations of one household. The short 3-day contact window suggests the attackers are prepared to publish quickly, increasing the chance that your information could surface on multiple underground forums within weeks.

Doxxing and Identity-Chain Risks

Stolen notary documents create long-term doxxing chains because they directly link real-world identities, physical addresses, and family members to email addresses, phone numbers, or account handles that appear in other breaches. Once attackers or opportunistic criminals obtain this data, they can map your online presence across social media, children’s gaming accounts, and financial portals. Credential leaks of this nature frequently cascade into account takeovers, especially when the same password has been reused. The exposure of inheritance or property records can also make your family a target for impersonation scams or spear-phishing campaigns that reference specific private details only a notary would possess.

Everest Ransomware Group Track Record

Public reporting attributes the Everest ransomware group’s emergence to late 2020. The gang has targeted organizations across Europe and North America, with prior victims including healthcare providers, manufacturers, and professional services firms. Their typical playbook begins with initial access gained through phishing or exploited remote desktop services, followed by lateral movement, data exfiltration, and deployment of ransomware. Everest then operates a leak site to pressure victims, publishing increasing volumes of data if ransom demands are not met. The group’s extortion style combines threats of data publication with offers to delete the stolen archive upon payment, though there is no guarantee they will honor that commitment.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity drawn from this and earlier breaches.
• Rotate any password you have ever used for email or online accounts tied to Italian legal or property services, then enable 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure of your information is caught in hours, not months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts, which often become entry points when credential leaks chain back to a shared family address.
• Let remediation specialists handle takedown requests for any exposed personal documents that appear on data-broker or underground sites.

The incident underscores how quickly a single professional services breach can place your family’s most private legal and financial history into criminal hands. Acting promptly to understand your exposure and interrupt those identity chains remains the most practical defense. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, and hands-on remediation by specialists, with household coverage that includes children’s gaming accounts vulnerable to cascading takeovers.