CERT-AGID Reports More Than 650 PEC Abuse Cases in 2026

Summary

CERT-AGID says it handled over 650 cases involving abused or maliciously created Italian PEC mailboxes since January 2026. It coordinates with providers to reset compromised accounts or deactivate malicious ones and warns recipients about suspicious messages.

Key points

• CERT-AGID reports handling more than 650 events involving abused or maliciously created PEC mailboxes since January 2026.
• The agency says the number of cases has risen over the months, indicating increased abuse of a communication channel often perceived as trustworthy.
• For compromised legitimate accounts, CERT-AGID asks the responsible PEC provider to reset the mailbox; for mailboxes created solely for malicious purposes, it requests deactivation.
• CERT-AGID says it coordinates with Italian PEC providers to exchange information and respond to detected abuse.
• PEC confirms message delivery, not the safety of message content; messages may contain malicious links, infected attachments, or scams.
• Recipients are advised not to click unexpected or suspicious links or open attachments from unknown sources, and to report suspected abuse to their provider and CERT-AGID.

MITRE ATT&CK