Skip to content
Leak-site post naming Sinop Energia, captured by ThreatCluster

Sinop Energia

global secret group

Ransomware leak-site victim intelligence · EN

Data size
300 GB (43,113 Files, 5,372 Folders)
Files
43,113
Views
43,113
Posted
Jul 26, 2026
Country
Brazil
Industry
Electricity, Oil & Gas

Summary

Written by ThreatClusterfrom victim profile, leak post, screenshot

The group claims to have stolen 300 GB of Sinop Energia data, comprising 43,113 files and 5,372 folders, from Sinop Energia via its subsidiary Companhia Energética Sinop. The leak identifies the victim as Sinop Energia (domain sinopenergia.com.br) in the electricity sector in Brazil, with 51-200 employees and revenue of $12.2 million. The leak post states the publication status as listed.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Employees
0
Domains
sinopenergia.com.br

What was taken

Sinop Energia, through its subsidiary Companhia Energética Sinop, is responsible for the construction and operation of the Sinop Hydroelectric Plant in northern Mato Grosso. The company focuses on generating, operating, and marketing the energy produced by the plant for a duration of 35 years. It aims to support local communities through socio-environmental programs and investments, benefiting over 150,000 people. The company is jointly owned by EDF Norte Fluminense, Eletronorte, and Chesf

Data categories
PIIDatabasesSource codeEmailsContracts
Leak site tags
EnergyHydroelectricBrazilPublic Company

Leak-site images (2)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
The image contains a Brazilian identification document (CNH) with personal details, a QR code, and a photograph of the individual.
onion leak page16 MB