Summary
Written by ThreatClusterfrom site fields, file listing, victim profile, leak post, screenshotIncransom claims FINANCIAMENTO LTDA has had 1.53 TB of data exfiltrated, comprising 3,619,372 files and 908,472 folders. The leak page describes the data as including personal identification documents and financial records. FINANCIAMENTO LTDA is listed as the victim, with revenue of $4 million, and partners named on the page include Caixa Economica Federal, Construtora Tenda, Cury Construtora, Santander Brasil, and Morgan Stanley; the post is published.
Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.
Victim profile
- Domains
- h2financiamento.com.br
What was taken
FINANCIAMENTO LTDA 14.10.2026 15:26 Revenue: 4M$ Proof. H2 Financiamento h2financiamento.com.br Total leak: 1.53 TB, 3.619.372 Files, 908.472 Folders Data: Clients Personal ID/Passport, Driver license, Clients (RG / CIN) CPF (Cadastro de Pessoas Físicas), Birth certificate, Clients Risk Assessment, Finance doc's, Bank statements, Tax invoice and a lot of other personal information. Data type: High Confifential. Partners: Caixa Economica Federal, Construtora Tenda, Cury Construtora, Santander Brasil, Morgan Stanley. The full version of the publication is coming soon.
Also stated on the leak page
Fields this group publishes that do not map to a standard column. Labels are the site's own.
- Partners
- Caixa Economica Federal, Construtora Tenda, Cury Construtora, Santander Brasil, Morgan Stanley
- Total leak
- 1.53 TB, 3.619.372 Files, 908.472 Folders
Leak-site images (1)
Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.