Views
90,248
Posted
Jul 1, 2026
Country
Brazil
Industry
Government
Summary
Written by ThreatClusterfrom victim profile, leak postapt73 states Gov.br is the victim of a ransomware incident. The leak post is published and has 60,828 views; the group describes Gov.br as the official state digital platform and domain zone of the Brazilian Federal Government. Victim profile on the leak lists domain gov.br and country Brazil.
Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.
What was taken
Gov.br — this is the official state digital platform and domain zone of the Brazilian Federal G...
Leak-site images (6)
Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.
ThreatCluster capture
Document titled "Declaração de Atualização Cadastral" from the Tribunal de Contas do Estado de São Paulo, containing personal information fields and a watermark.
onion leak page66 KB
Screenshot of a spreadsheet listing contacts for a team, including names, professions, and email addresses, with a logo in the background.
onion leak page69 KB
Scan of a Brazilian driver's license featuring personal details and a photograph of the license holder.
onion leak page73 KB
Scan of a Brazilian vehicle registration certificate with various fields including vehicle details and a watermark.
onion leak page65 KB
The image contains a technical drawing or blueprint with a layout of a road or infrastructure project, overlaid with a large graphic of a spider symbol.
onion leak page75 KB