Skip to main content
Apexward Pulse
Type Incident

Ransomware

Ransomware claim: Istituto Borgo (group: Shiba)

2 sources

At a glance

Low
30-day window, from the last update
Evidence-weighted, not popularity
Signal

Unconfirmed ransomware actor claim — early supplier warning, not proof of a breach.

Why Low

Low rather than Medium: UK relevance is 40 of 100, little UK-specific signal so far.

Briefing

  • The claim has not been independently confirmed — treat it as an early supply-chain warning.
  • Check whether you depend on the named organisation, and watch for a company statement or regulator notice.
  • Do not treat the listing as a confirmed breach.

Questions to ask IT

  • Is Istituto Borgo one of our suppliers, partners or customers, and have they contacted us?
  • Do they hold any of our data, or run a service we depend on?
  • If their service stopped tomorrow, what is our fallback?

Next steps

  1. Check whether you depend on the named organisation and what contingency exists if the claim is later confirmed

Summary

  • Actor-claim / leak-site listing: Istituto Borgo attributed to Shiba.
  • The listing is an unconfirmed actor claim, not independent proof of a breach.
  • A second claim aggregator has recorded the same listing; that is still not confirmation.
  • Check whether the named organisation is a supplier, partner or customer before escalating.

Read the original reportRansomLook(opens in a new tab)

Why this matters in the UK

  • Claimed domain icborgosangiuseppe.edu.it — check whether this organisation supplies or serves you

Pulse

Last change 2d ago · Recheck overdue since 6 Nov 2026, 18:59 UK time

  1. Story6 Nov 2026, 13:20 UK time · 2d ago

    Linked reporting from RansomLook (threat actor claim aggregator).

    Read source (RansomLook)
  2. Story6 Nov 2026, 16:59 UK time · 2d ago

    Linked reporting from ransomware.live (threat actor claim aggregator).

    Read source (ransomware.live)

2 entries so far. The timeline chart appears once this story has more history.

Sources

How we know

Statements extracted from sources. Higher confidence means stronger corroboration.

  • ClaimedHeadline45% confidence

    Ransomware claim: Istituto Borgo (group: Shiba)

  • ClaimedRansomware actor claim40% confidence

    Actor-claim / leak-site listing: Istituto Borgo attributed to Shiba. The claim has not been independently confirmed.

  • ClaimedSummary fact40% confidence

    A ransomware group has listed the organisation on a leak site.