Report them to the authorities. This is extortion of private data and needs to be investigated.

The decisions that Nexi has made are incomprehensible to us. Over the last months, as part of a security audit that Nexi claimed to be conducting, we have provided them with large amounts of the FSFE’s financial documentation, which even included private information of our executive staff. We have answered all of their questions. But we have to draw a line when private companies like Nexi demand access to the sensitive and private data of our supporters.

Almost sounds like they're being socially engineered by an impostor. Bizarre behaviour.

specifically the usernames and passwords of our supporters

If FSFE is even able to provide passwords for user accounts in the first place, they're doing password security wrong.

Having gotten that off my chest, of there is nothing missing from this story and it's a complete picture of events, Nexi needs to be investigated for extortion.

https://www.nexigroup.com/en/media-relations/press-contacts/

I sent them an angry email and you should too.

Nexi ratings: BBB- (Fitch, 2024)

Ba1 (Moody's, 2025

BBB- S&P, 2025)

Even the rating whores think Nexi is trash.

I hate to be that guy but it wouldn't have happened if XMR was used