I expect some small tax jurisdictions (i.e., countries) to try to get more IT business by disassociating with the USA and EU. More power to them.
You've missed the point: they are not incorporated in Iceland. They are incorporated in Italy. Move their servers does them no good, and doesn't do anything to reduce their exposure.
An analogy: a company can move all its money offshore to reduce its tax liability, but only if at the same time it sets up a offshore limited liability subsidiary to handle that. Just moving all your money one day to the Cayman Islands without any of the legal and corporate work associated with it doesn't reduce your tax bill.
Similarly, it doesn't matter if Clipperz servers are hosted in Iceland unless said servers are owned and managed by a Clipperz subsidiary based in Iceland and not subject to Italian law. It sounds like they think they've figured out a clever wheeze, but they haven't at all:
> Clipperz was born as an Italian company subject to Italian laws and so it will remain. We are not planning to move people or assets out of Italy, we just moved the tech infrastructure to a place where our fundamental rights enjoy better protection.
Moving the tech whilst keeping the entire company in Italy and subject to Italian laws doesn't give their fundamental rights any better protection.
In other words, they believe Icelandic authorities will be more likely to tell the Italian authorities where to go than would the US authorities. This doesn't seem unreasonable.
I'm pretty sure they do have a lawyer already (ever tried to do business in Italy? You'll need a lot of lawyers). I do hope these attacks are from "usual" bad agents (i.e. organised crime, people interested in laundering BTC), rather than some dirty-trick Italian agency, but who knows, the country is crazy atm...
They might not have broken in, but that doesn't mean they can't, just that they had an easier way to do it.
I doubt Germany and Brazil gave the NSA permission to eavesdrop on them, but they did it anyway. Make no mistake, simply not having anything in the US is no protection if you are hiding from the NSA.
But none of that matters (there is more to security than pretending to hid from the NSA), the GP appears to be correct and they moved to Iceland to deal with Italian law, while living and being based in Italy. They seriously need a lawyer.