Skip to content
Dark Web Intelligence on X: " BRAZIL SC EDUCATION SECRETARIAT, CORIPA ...

Dark Web Intelligence on X: " BRAZIL SC EDUCATION SECRETARIAT, CORIPA ...

X • September 19, 2026

Dark Web Intelligence on X: "🇧🇷 BRAZIL SC EDUCATION SECRETARIAT, CORIPA & UFAC DATABASE LEAK CLAIM (~2.89M)

A threat actor is advertising what they claim is an exclusive dump of databases and admin credentials affecting three Brazilian public-sector entities: the Santa Catarina State Secretariat of Education (Secretaria de Educação de SC), CORIPA (intermunicipal public consortium), and the Federal University of Acre (UFAC).

* ~2,891,402 total records (data year claimed 2026)

* Leaked databases plus administrator credentials

* Sample material framed as SC education secretariat admin accounts (role usernames)

* Method claimed: SQL injection, WAF bypass, and social engineering

Multi-entity Brazilian government/education dumps are often bundled, recycled, or padded. Whether CORIPA, or UFAC production systems were actually compromised, whether the ~2.89M figure is accurate across all three targets, and whether sample admin hashes are authentic or staged are unverified from the listing alone.

We assess this as an unverified threat-actor claim involving alleged Brazilian state/federal public education and consortium data, NOT confirmation of a compromise of Santa Catarina education systems, CORIPA, or UFAC.

If authentic and non-public, education-sector and university records plus admin credentials could enable account takeover, fraud, targeted phishing of students/staff, and further network access.

#DDW #DarkWeb #Brazil #SantaCatarina #UFAC #CORIPA #Education #Government #DataBreach #ThreatIntelligence #CyberSecurity"

🇧🇷 BRAZIL SC EDUCATION SECRETARIAT, CORIPA & UFAC DATABASE LEAK CLAIM (~2.89M)

A threat actor is advertising what they claim is an exclusive dump of databases and admin credentials affecting three Brazilian public-sector entities: the Santa Catarina State Secretariat of Education (Secretaria de Educação de SC), CORIPA (intermunicipal public consortium), and the Federal University of Acre (UFAC).

* ~2,891,402 total records (data year claimed 2026)

* Leaked databases plus administrator credentials

* Sample material framed as SC education secretariat admin accounts (role usernames)

* Method claimed: SQL injection, WAF bypass, and social engineering

Multi-entity Brazilian government/education dumps are often bundled, recycled, or padded. Whether

, CORIPA, or UFAC production systems were actually compromised, whether the ~2.89M figure is accurate across all three targets, and whether sample admin hashes are authentic or staged are unverified from the listing alone.

We assess this as an unverified threat-actor claim involving alleged Brazilian state/federal public education and consortium data, NOT confirmation of a compromise of Santa Catarina education systems, CORIPA, or UFAC.

If authentic and non-public, education-sector and university records plus admin credentials could enable account takeover, fraud, targeted phishing of students/staff, and further network access.

🇧🇷 BRAZIL SC EDUCATION SECRETARIAT, CORIPA & UFAC DATABASE LEAK CLAIM (~2.89M)

A threat actor is advertising what they claim is an exclusive dump of databases and admin credentials affecting three Brazilian public-sector entities: the Santa Catarina State Secretariat of Education (Secretaria de Educação de SC), CORIPA (intermunicipal public consortium), and the Federal University of Acre (UFAC).

* ~2,891,402 total records (data year claimed 2026)

* Leaked databases plus administrator credentials

* Sample material framed as SC education secretariat admin accounts (role usernames)

* Method claimed: SQL injection, WAF bypass, and social engineering

Multi-entity Brazilian government/education dumps are often bundled, recycled, or padded. Whether

, CORIPA, or UFAC production systems were actually compromised, whether the ~2.89M figure is accurate across all three targets, and whether sample admin hashes are authentic or staged are unverified from the listing alone.

We assess this as an unverified threat-actor claim involving alleged Brazilian state/federal public education and consortium data, NOT confirmation of a compromise of Santa Catarina education systems, CORIPA, or UFAC.

If authentic and non-public, education-sector and university records plus admin credentials could enable account takeover, fraud, targeted phishing of students/staff, and further network access.