Summary
Written by ThreatClusterfrom file listing, victim profile, leak post, screenshot, ransom note, our reportingEmperador claims to have exfiltrated 720.0 MB of data from Cassias MG Government (cassia.mg.gov.br) in Brazil, across 6 files. The data categories claimed include personal data, medical (SUS), RG/CIN, birth certificate, and CPF (Brazilian identity numbers), with sample filenames such as Banco do Brasil.pdf and cassias_mg_gov_br.zip. The leak post is published, and the ransom note states a deadline to negotiate and that the data originate from Cassias MG Government departments.
Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.
Victim profile
- Domains
- cassia.mg.gov.br
What was taken
network commitment, from government credentials to justice panels, such as access to the financial sector, police, personal data, medical (SUS), RG(CIN), BIRTH CERTIFICATE, CPF (identity number in Brazil) among other data from CASSIAS.MG.GOV departments, we will give you a deadline to negotiate with us!
Ransom note
Published by the group on their leak site, reproduced verbatim.
network commitment, from government credentials to justice panels, such as access to the financial sector, police, personal data, medical (SUS), RG(CIN), BIRTH CERTIFICATE, CPF (identity number in Brazil) among other data from CASSIAS.MG.GOV departments, we will give you a deadline to negotiate with us!
Also stated on the leak page
Fields this group publishes that do not map to a standard column. Labels are the site's own.
- To Publish
- cassias_mg_gov_br.zip (720.0 MB)
- gallery_images
- 3
Leak-site images (5)
Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.