Trevi Technology

Incident Overview

Trevi Technology, operating within the Technology sector, has been subject to a cybersecurity incident. Ground-truth telemetry indicates the threat activity is attributed to threat actor Orova.

Trevi Technology was listed on the Orova ransomware extortion leak portal. 特雷維科技成立於2017年，特雷維這個名字來自英文Trevi，而Trevi是取自義大利羅馬著名景點「許願池-Fontana di Trevi」，我們的願望就是完成客戶的期望，甚至超乎客戶的期待。我們是個創新服務的團隊，非常重視每個細節，又具備整合性大局思考力。提供海外客戶平台，希望以先進軟體技術，整合資訊科技讓使用者有更好的體驗

Compromised Assets & Data Scope

The specific volume of affected customer or organizational records remains under active forensic investigation. Primary affected online infrastructure and perimeter domains include trevi.cc.

Specific classes of compromised records, credentials, or proprietary information continue to be audited through ongoing forensic investigation.

Authoritative Directives & Vendor Disclosures

• Continuous Telemetry Monitoring: Formal statutory regulatory filings (SEC Form 8-K, State AG portals) and sovereign agency advisories (CISA, NCSC) are continuously monitored via automated ingestion pipeline.