Important Communication – Notice of Data Breach

Dear Customer/Supplier,

We are writing to inform you of a cybersecurity incident affecting the “Contabilità in Cloud” service provided by TeamSystem S.p.A., which Mekex Innovation Srl uses to manage its accounting and administrative activities.

What happened

TeamSystem, acting as a data processor on behalf of Mekex pursuant to Article 28 of Regulation (EU) 2016/679 (the “GDPR”), informed us that it had detected unauthorized access to its systems.

According to the information currently available, the attack began on 19 August 2026 and was detected by TeamSystem on 24 August 2026.

The unauthorized access may have resulted in the copying/exfiltration of data stored in the Contabilità in Cloud software, potentially including data relating to customers, suppliers and other individuals or entities whose information was present in Mekex’s records and accounting transactions.

Depending on the information stored in the system, the categories of data potentially affected may include:

  • personal and company identification details;
  • contact details;
  • bank account details (IBAN);
  • information relating to accounting transactions, such as descriptions, amounts and counterparties.

According to the information currently available, login credentials, special categories of personal data, criminal conviction and offence data, and identification document data do not appear to have been involved.

TeamSystem’s technical investigations are still ongoing in order to determine more precisely the scope of the incident and the data actually affected.

Measures taken

TeamSystem informed us that it immediately activated its incident response team and implemented containment measures, including changing the password and revoking application sessions associated with the account used by the attacker, as well as carrying out further monitoring and technical investigations.

On our side, Mekex Innovation Srl has notified the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) of the personal data breach, in accordance with the obligations set out in the GDPR, and continues to monitor the development of the incident and the information provided by TeamSystem.

We have also initiated a review of the data and individuals potentially affected and are implementing additional preventive measures, including:

  • raising employee awareness of phishing, impersonation and social engineering risks;
  • strengthening controls over payment requests and requests to change bank account details;
  • reviewing unusual or unexpected communications concerning payments and banking information;
  • reviewing the security measures and controls applied to suppliers processing personal data on behalf of Mekex;
  • maintaining and updating our internal procedures for managing security incidents and personal data breaches.

Our internal procedures also include organisational and technical measures concerning access management, data confidentiality, employee awareness and training, supplier management, and the security of the systems and services used by the Company.

Recommendations

In light of the incident, we recommend paying particular attention over the coming weeks to any communications appearing to come from Mekex Innovation Srl or from your business counterparties that:

  • request changes to bank account details;
  • request urgent or unusual payments;
  • contain unexpected links or attachments;
  • request login credentials, passwords or other confidential information.

In particular, requests to change bank account details should not be considered valid solely on the basis of an email communication. In the event of an unexpected or unusual request, we recommend verifying its authenticity in advance using a previously known and trusted contact channel.

At present, we have no evidence of fraudulent use of the data or of any damage having occurred to the potentially affected individuals or entities. This notification is therefore being provided as a precautionary measure and in the interests of transparency, so that potentially affected parties can take appropriate precautions.

We will continue to monitor the situation and, should further investigations reveal relevant information or the need for additional action, we will provide further notification as appropriate.

Should you have any questions or require further information regarding this notification, please contact Mekex Innovation Srl using our usual contact details.

We apologise for any inconvenience this may cause and thank you for your attention and cooperation.

Kind regards,

Mekex Innovation Srl