On March 12, 2025, the Italian university Unimore.it appeared on the leak site of the funksec ransomware group. Internal files were allegedly exfiltrated during a ransomware attack, and the university’s data is now publicly listed, putting students, staff, alumni, and their families at risk of identity theft and doxxing.
Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 580 companies.
See what is exposed about you — free scan →Watch unimore.it
Get alerted the next time unimore.it files a breach with any US regulator — the filing, dated and sourced. A free single-company slice of Signals; no account needed.
We’ll email you only about unimore.it’s future breach filings and how to watch a whole vendor list — not general marketing. Unsubscribe any time.
Watching your whole vendor list (50 to 500 companies, by tier) is GalaxyWarden Signals.
What Public Reporting Shows
Public reporting indicates that funksec posted Unimore.it on its dark-web leak site on March 12, 2025. The university, officially known as the University of Modena and Reggio Emilia, may have had internal files stolen in a ransomware incident. The exact number of people affected remains unknown, but the breach involves sensitive institutional records that routinely contain personal information such as names, contact details, dates of birth, and possibly financial or academic records. No confirmed timeline of the initial intrusion has been released, and the university has not yet issued a detailed public statement on the volume or exact categories of data exposed.
Why This Matters for You and Your Family
If you or anyone in your household attended, worked at, or applied to the University of Modena and Reggio Emilia, your personal information may now be in attackers’ hands. Internal files from universities commonly include addresses, phone numbers, email accounts, and student IDs. Once leaked, this data can be sold or used to target you with phishing, account takeovers, or identity fraud. Children or grandchildren who studied there may have their early academic records exposed, which can later link to current addresses, workplaces, or gaming profiles. Even if you are not certain your data was included, the uncertainty itself creates stress and forces you to spend time monitoring accounts that could suddenly be at risk.
The Doxxing and Identity-Chain Implications
A single university breach rarely stops at one record. Attackers chain information across multiple leaks to build complete profiles. An email from your Unimore days might match a password reused on social media, a streaming service, or your child’s gaming account. This creates an identity chain that leads directly to your current home address, phone number, and family members’ names. Public reporting shows that credential leaks of this type frequently cascade into doxxing campaigns, where personal details are published to harass or extort victims. Gaming accounts are especially vulnerable because children and teens often reuse simple passwords or email addresses tied to school records, turning one institutional breach into a direct route to family doxxing.