Leak-site post naming gov.br, captured by ThreatCluster

gov.br

apt73

Ransomware leak-site victim intelligence · EN

Views
55,187
Posted
Jul 1, 2026
Country
Brazil
Industry
Public Sector

What was taken

Gov.br — this is the official state digital platform and domain zone of the Brazilian Federal G...

Leak-site images (6)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
Document titled "Declaração de Atualização Cadastral" from the Tribunal de Contas do Estado de São Paulo, containing personal information fields and a watermark.
onion leak page 66 KB
Screenshot of a spreadsheet listing contacts for a team, including names, professions, and email addresses, with a logo in the background.
onion leak page 69 KB
Scan of a Brazilian driver's license featuring personal details and a photograph of the license holder.
onion leak page 73 KB
Scan of a Brazilian vehicle registration certificate with various fields including vehicle details and a watermark.
onion leak page 65 KB
The image contains a technical drawing or blueprint with a layout of a road or infrastructure project, overlaid with a large graphic of a spider symbol.
onion leak page 75 KB