Se fare intelligence significa anticipare le traiettorie di rischio, allora a pochi giorni dall’inizio delle Olimpiadi Invernali Milano-Cortina 2026 è legittimo fare un primo bilancio. Non per rivendicare “previsioni azzeccate”, ma per verificare se l’analisi dei rischi pubblicata prima dei Giochi abbia intercettato correttamente le dinamiche poi emerse.
The independent report published by Vigilar Group in the days immediately preceding the opening ceremony had identified several key risk axes: territorial dispersion as a structural factor of vulnerability, cyber pressure as a concrete and ongoing threat, and the possibility that the Olympic event could become an amplifier of protests and demonstrative actions.
In the first days of the Games, these trajectories found confirmation.
Complessità sistemica e rischio cyber: un tema che è entrato nel dibattito
Milano-Cortina 2026 non è un’Olimpiade compatta. Le sedi sono distribuite tra Lombardia, Veneto e Trentino-Alto Adige, con una forte dipendenza da infrastrutture digitali e coordinamento tecnologico.
In the report, this configuration was described as a systemic risk factor: in a distributed event, the target is not the single venue, but the ability of the entire system to withstand pressure.
This approach was also echoed by the national press, including Il Messaggero and Il Gazzettino, which highlighted the systemic complexity of the Games and the centrality of cyber risk, citing Vigilar Group’s study.
A few weeks after the report was published, Flashpoint, an international company active in the threat intelligence sector, also published an analysis of the Milano-Cortina 2026 context, underscoring how the dispersed geographic footprint increases the surface of exposure to multi-vector threats.
Quando analisi indipendenti convergono sugli stessi fattori strutturali, significa che la traiettoria di rischio è reale.
Cyberattack and continuous pressure
On the night between 5 and 6 February, in conjunction with the opening ceremony, a hacker attack attributable to the pro-Russian sphere took place. In the days that followed, further DDoS campaigns and probing activities were recorded.
Among the reported targets were websites and digital infrastructures linked to the Games, institutional portals, services associated with the Farnesina, systems connected to Leonardo, and hospitality platforms in the Cortina area.
The attacks were neutralized without structural impact, but they nonetheless represented clear coordinated cyber pressure. Not spectacular sabotage, but rather continuous operational stress, precisely the most plausible scenario outlined in the report.
Protests and demonstrative actions
Il report aveva evidenziato come Milano-Cortina 2026 potesse diventare un moltiplicatore di visibilità per movimenti antagonisti e gruppi attivisti, sia in relazione alle tensioni geopolitiche internazionali sia rispetto a dinamiche di conflittualità interna.
This was not a generic hypothesis: the analysis pointed out how major sporting events, by definition, constitute an ideal media stage for demonstrative actions, marches, symbolic initiatives, and possible sabotage attempts with strong communicative value.
In the first days of the Games, this scenario materialized. Protests were recorded near sensitive areas such as the Olympic Village, along with initiatives attributable to pro-Pal circles and groups linked to the social center milieu, extending to claims of sabotage against transport infrastructure, including actions targeting the railway network with explicit references to the Olympic event.
Episodi circoscritti, ma coerenti con uno scenario già delineato: nei grandi eventi ad alta esposizione mediatica, anche azioni limitate possono produrre impatti operativi e reputazionali significativi.
The observed dynamic was not an anomaly: it was a plausible scenario and one that had been analytically anticipated.
Increase in prostitution
In the first days of the event, a social dynamic also emerged which, although not falling within conventional security risks, confirms a critical issue outlined in our report.
Journalistic sources have in fact documented a rise in escort and prostitution advertisements and services in the urban and tourist areas involved in the Games. This phenomenon, which emerged alongside the increase in the flow of people and the temporary economic opportunities generated by the event, reflects one of the key concepts of the report: the ability of a major event to amplify already existing social dynamics and to attract opportunistic behaviour or parallel-market activity, with potential impacts on the perception of security, on local services, and on the broader socio-economic context.
Predicting does not mean guessing
Un’analisi dei rischi non serve a indovinare il singolo episodio. Serve a individuare in anticipo le traiettorie plausibili e i fattori strutturali di vulnerabilità, offrendo una chiave di lettura concreta delle complessità operative e delle criticità potenziali.
A pochi giorni dall’inizio delle Olimpiadi Invernali Milano-Cortina 2026, cyber-pressione, proteste, complessità territoriale e dinamiche socio-economiche non rappresentano sorprese. Rientrano nello scenario realistico di un grande evento diffuso, ad alta esposizione mediatica e fortemente interconnesso sul piano digitale e logistico.
Il valore di un’analisi preventiva sta proprio qui: non nel prevedere il singolo attacco o la singola protesta, ma nel riconoscere per tempo le condizioni che rendono certi scenari probabili.
Today, intelligence technologies and predictive analysis tools make it possible to detect weak signals, correlations, and risk patterns with levels of precision that would have been unthinkable until just a few years ago.
Le potenzialità in termini di prevenzione e mitigazione dei rischi sono cresciute in modo significativo.
Il report su Milano-Cortina 2026 era un esercizio analitico approfondito, non un’attività investigativa mirata. La scelta di non avviare attività operative o profiling specifici è stata deliberata: l’obiettivo era fornire una lettura sistemica del rischio, non costruire dossier su singoli soggetti.
When the trajectories identified before the event are reflected in the facts, it means the method was sound.
And it is in the method that the true value of intelligence lies.
Resta il dato centrale: quando le traiettorie individuate in fase preventiva trovano riscontro nei fatti, significa che il metodo era corretto. Ed è proprio nel metodo che risiede il valore dell’intelligence.
English 
Italian