Skip to content
Whitearmor Claims Ransomware Attack on Brazil's Liberal Party

Whitearmor Claims Ransomware Attack on Brazil's Liberal Party

First seen 25 Oct 2026, 22:41 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 26, 2026 at 00:42 UTC
  • •Whitearmor claims to have breached Brazil's Partido Liberal, demanding a $5 million ransom.
  • •The group has reportedly acquired sensitive data, including member records and credentials.
  • •The Liberal Party has not confirmed the breach, and the claims remain unverified.

The ransomware group Whitearmor has claimed to have compromised Brazil's Partido Liberal (PL), the political party associated with former president Jair Bolsonaro. They have reportedly obtained sensitive data including 79,000 member records, 374 live e-Título credentials, and 340,000 member images. The group demands a ransom of $5 million in Bitcoin to prevent the release of this data. As of now, PL has not confirmed the breach, and the claims remain unverified. Analysts warn that leaks during an election year could lead to targeted phishing and disinformation campaigns. The incident is particularly concerning given the political context, with Flávio Bolsonaro as the party's presidential candidate in the 2026 elections. The situation is still developing, and stakeholders are advised to treat any leaked documents with caution.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-25
Whitearmor claims breach of Partido Liberal
Whitearmor lists PL on their leak site, claiming to hold extensive member data and demanding ransom. The party has not confirmed the incident.
Ransomware.Live
2026-10-25
Dark Web Intelligence reports on Whitearmor's claim
Dark Web Intelligence notes that the claim has not been verified and warns of potential phishing risks during the election year.
X

More articles in this cluster (2)

Extracted Entities (4)

1 / 3

Common questions

Has the Partido Liberal confirmed the breach?
No, the Partido Liberal has not publicly confirmed any breach at this time.
What type of data was reportedly stolen?
Whitearmor claims to have stolen member records, e-Título credentials, and images of members.
What should organizations do in response?
Organizations should monitor for any leaked data and prepare for potential phishing attacks targeting their members.