Security notice Fraudulent messages sent from our address on 28 July 2026

Published 31/07/2026 Italian version https://www.apogeo.space/avviso-sicurezza

In short. On 28 July 2026, between 13:46 and 13:54 (CEST), fraudulent messages were sent from the genuine mailbox of our Chief Executive Officer, following unauthorised access. Those messages did not come from Apogeo Space and their content is not true. If you received one, please do not act on it.

How to recognise them. Subject line similar to “APOGEO SPACE S.R.L – Series A – EUR …. Investment & Funding Docs”, with varying amounts. They invited recipients to review documents concerning a purported capital-raising transaction, through a link or an attachment. As they were sent from our genuine address, they passed the usual sender-authenticity checks.

What happened. On 13 July 2026 an unauthorised third party gained access to our Chief Executive Officer’s corporate mailbox by deceiving him into authorising an unknown device. The access continued until 28 July 2026, when the mailbox was used to send the fraudulent messages. The unauthorised access ended on the same day.

What data is involved. The e-mail addresses held among that mailbox’s contacts, which were used to send the messages. If you have previously exchanged correspondence with that mailbox, please assume that the content of that correspondence, including attachments, may have been read by an unauthorised third party: the access lasted from 13 to 28 July 2026 and cannot be confined to any part of the mailbox content.

What we ask you to do.

Do not act on the messages of 28 July 2026 with the subject lines described above; do not open their links or attachments; please delete them.
Always verify by telephone, using contact details already known to you, any request for payment, for a change of bank details or for documents made in the name of Apogeo Space. This applies in the coming weeks as well.
Report the message to your IT function or IT service provider.
If you have already replied, opened a link or made a payment.

If you replied, your reply was read by the unauthorised third party: if it contained confidential information, bank details, documents or credentials, please treat it as exposed.
If you entered your credentials on a page reached from that message, change the password immediately, revoke active sessions, enable multi-factor authentication and inform your IT function.
If you opened an attachment, have the device checked for malware.
If you made a payment or changed bank details, contact your bank immediately and ask for the transfer to be blocked or recalled, report the matter to the police and let us know at the contacts below: we can provide the technical elements in our possession to support your report. Please retain the messages with full headers and the transaction records.
What we have done. We revoked all active sessions, replaced credentials, removed the persistence mechanisms installed by the unauthorised third party and completed checks across our entire environment. We carried out a technical analysis of the origin and extent of the access, notified the breach to the Italian Data Protection Authority and informed affected individuals individually where we hold their address. Further measures are being implemented to prevent a recurrence of this specific attack method.

Our bank details have not changed. We do not request payments, changes of bank details or the sending of documents by e-mail: any such request, even from one of our addresses, should be treated as fraudulent and verified by telephone.

Authenticity of our communications. If you received a security communication from us on or after 31 July 2026, signed by Paolo Bellagente, Engineering and Software Development Manager, or by Guido Parissenti, legal representative, it is genuine: it contains no links or attachments and asks you for no data. This page is its counterpart. If in doubt, please call us.

The contact form below belongs to our website and is unrelated to this notice: in connection with this incident we do not ask you to send us any data or documents.

Contacts. Paolo Bellagente, Engineering and Software Development Manager — ict@apogeo.space — +39 030 7821542. Apogeo Space S.r.l. — operating office: Borgo Wührer 119, Brescia, Italy; registered office: Via Malta 7/C, 25124 Brescia, Italy — VAT 03524570987.

Paolo Bellagente, Engineering and Software Development Manager — Apogeo Space S.r.l.