Ordine Avvocati di Roma data breach

Breach date: 2019-05-07. Added to this index: 2019-05-26. Accounts affected: about 42K. Domain: ordineavvocatiroma.it.

What happened

In May 2019, the Lawyers Order of Rome suffered a data breach by a group claiming to be Anonymous Italy. Data on tens of thousands of Roman lawyers was taken from the breached system and redistributed online. The data included contact information, email addresses and email messages themselves encompassing tens of thousands of unique email addresses. A total of 42k unique addresses appeared in the breach.

Breach data sourced from Have I Been Pwned, used under CC BY 4.0. Additional breach metadata provided by XposedOrNot. DataExposed is an independent service and is not affiliated with or endorsed by either.

What was exposed

  • Email addresses: The email address you used to register or log in. It is the most common field in breaches because it doubles as your username on most sites.
  • Email messages: The content of emails you sent or received, including subject lines, message bodies, attachments and contacts, exposed through a compromised mailbox, an email provider or a company that kept copies.
  • Geographic locations: A general location recorded on your account, such as a country, state, city, postcode or region, either typed in by you or estimated from your IP address.
  • Passwords: The secret you use to sign in, stored by the breached service either in plain text, in a scrambled form called a hash, or encrypted. How it was stored decides how quickly it can be recovered.
  • Phone numbers: Your mobile or landline number, collected at signup for contact, delivery updates, marketing and two-factor codes.

What to do now

  1. Check whether your own address is in this dataset with the free email breach check.
  2. Change the password on this service and every other site where you used the same password.
  3. Turn on two-factor authentication on your email account first, because it is the reset path for everything else.
  4. Treat calls and messages that quote real details about you as hostile until you verify them another way.

Frequently asked questions

What data was leaked in the Ordine Avvocati di Roma breach?

The Ordine Avvocati di Roma breach exposed Email addresses, Email messages, Geographic locations, Passwords, Phone numbers. About 42K accounts were affected.

Was I affected by the Ordine Avvocati di Roma breach?

Run the free email breach check with the address you used on that service. It will tell you whether your address appears in this dataset.

What should I do about the Ordine Avvocati di Roma breach?

Change the password on that account and everywhere you reused it, then turn on two-factor authentication. Passwords from this breach are traded and tried automatically against other sites.

Next steps