Skip to content
Cyberattack Disrupts Operations at Brazil's Port of Santos

Cyberattack Disrupts Operations at Brazil's Port of Santos

First seen 11 Nov 2026, 17:03 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 11, 2026 at 22:14 UTC
  • •Port of Santos faced major disruptions due to a suspected cyberattack starting November 6.
  • •The cybercriminal group N0n reportedly demanded a ransom of 23 Bitcoin for restoring services.
  • •Security measures at the port have been heightened to Level 2 amid ongoing investigations.

Brazil's Port of Santos is experiencing significant operational disruptions due to a suspected cyberattack that began on November 6, 2026, following a power outage. The Santos Port Authority (APS) confirmed its systems were targeted, but the extent of data access remains undetermined. Reports indicate that the international cybercriminal group N0n may have demanded a ransom of 23 Bitcoin, valued at approximately $2.4 million, to restore services. The outage has affected identification, access control systems, and digital tools essential for port operations, leading to delays in cargo handling and requiring manual processing for various tasks. The port's security level has been raised to Level 2, allowing for increased police presence. While APS maintains that vessel operations continue, the full impact of the disruption is still being assessed, and investigations by the Federal Police are ongoing.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 12h ago How this analysis works

Timeline

2026-11-06
IT outage begins at Port of Santos
A power fluctuation led to a major IT outage affecting port operations and systems.
Uknip
2026-11-08
Port security raised to Level 2
Increased security measures were implemented in response to the ongoing IT outage and access control issues.
Datamarnews
2026-11-11
APS confirms cyberattack
The Santos Port Authority confirmed its systems were targeted in a cyberattack but could not determine data access extent.
Folha

More articles in this cluster (5)

Following this threat?

Track N0n and Abratec in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (12)

1 / 3

Common questions

What systems are affected?
The outage has impacted identification systems, access controls, and digital tools used in port operations.
Is there confirmation of data being accessed?
No, the Santos Port Authority has not confirmed whether any data was accessed without authorization.
What should port authorities do now?
Authorities should enhance security measures, investigate the incident thoroughly, and prepare for potential ransom negotiations.