Italy’s Foreign Ministry says personal data belonging to Antonio Tajani has appeared on the dark web, and the foreign minister has asked for hybrid threats to be discussed at the G7 foreign ministers’ meeting in Paris on 9–10 November. The Tajani cyber threats case combines the reported publication of personal information with what he describes as intimidation extending to his family.
The ministry’s 7 November statement says its cybersecurity teams identified the material in recent days in an area accessible through the Tor network. It does not specify the types of personal data, how they were obtained or an attacker’s identity. Tajani’s request to the G7 presidency is an agenda proposal, not an announcement that other ministers have adopted it.
Tajani cyber threats reach beyond the minister himself
In his 7 November post, via @Antonio_Tajani on X, published at 09:11 GMT, Tajani said cybercriminals had circulated his personal information for days and were seeking more. He said his family was also being drawn into the threats and that people were prepared to pay for further details about him and his loved ones.
Tajani linked the targeting to Italy’s support for Ukraine. He also said it came in reaction to the Foreign Ministry’s cybersecurity work and vowed to continue cooperation with allies. Those are the minister’s statements about political motivation, not an independently established attribution of the operation to a particular group or state.
The ministry additionally expressed his solidarity with Rome prosecutor Francesco Lo Voi, Postal Police director Ivano Gabrielli and mayor Paolo Tassan-Zanin over the same threats. Its statement does not supply a separate technical account of what happened to each person. The public account is therefore about reported disclosure and intimidation, rather than a forensic reconstruction of a coordinated campaign.
A cyber directorate and a request for diplomatic coordination
Tajani said he had created a cyber directorate at the Foreign Ministry from 1 January to protect it against digital incursions. Both his post and the ministry’s communiqué point to that organisational response; his post also stresses connections with allies. Neither channel gives staffing, spending or performance figures for the directorate.
Building dedicated teams is also the focus of Ukraine’s order for state bodies to form cybersecurity teams. That is a separate public-sector defence initiative, not evidence that the same people or methods are behind the threats Tajani describes. The connection is institutional readiness: deciding who is responsible for defending government information and services.
The ministry says Tajani sought G7 consideration because of the rising level of hybrid threats against Italy and other European countries. European responses also extend to infrastructure protection, including UK proposals addressing subsea cable sabotage and electronic interference. Those proposals concern a different security problem and remain proposals, rather than measures agreed by the G7 in response to this disclosure.
A personal-data posting is also different from a government service outage. In the Belgian Finance Ministry cyberattack, officials described taking the MyMinfin portal offline as a precaution. The Italian statement instead describes finding Tajani’s information on a Tor-accessible site; it does not establish an intrusion into the Foreign Ministry’s systems or announce a comparable service shutdown.
Political motive and technical attribution answer different questions
The distinction matters because a public official can explain why he believes he is being intimidated without supplying the evidence needed to identify the perpetrator. Tajani’s position on Ukraine is part of his account of the threats. It cannot, by itself, establish who obtained the information, where it originated or who controls the site on which it appeared. Reporting the motive as his assessment preserves its political significance without turning it into a technical finding.
There are also two different tests for the response. A specialist directorate can give a ministry a clearer organisational focus, while a G7 discussion can raise the issue among allies. The existence of the first does not demonstrate that every intrusion has been stopped, and requesting the second does not mean a joint policy has been agreed. The personal dimension matters alongside those institutional questions: threats involving relatives are not captured simply by whether government services remain online.
For the Paris meeting, the concrete next question is whether hybrid threats are taken up and whether ministers publish any agreed action. Until then, the public record supports a disclosure notice, the minister’s account of intimidation and a request for discussion—not an identified attacker or an adopted G7 response.
Sources
- Italian Foreign Ministry: Tajani personal-data disclosure and G7 request, 7 November 2026
- Antonio Tajani: personal-data threats and ministry cyber defence, 7 November 2026
Related stories
Ukraine’s order for government cybersecurity teams follows the organisational question raised here: how public bodies assign people and responsibility to defending state information.
Follow @tsnmediahub on X for breaking AI news as it happens.
Follow on X
