Country
Ransomware attacks in Brazil
Ransomware groups have listed 588 organisations from Brazil on their leak sites since February 2022; the latest post is from 19 October 2026. Most active groups: Lockbit3, Thegentlemen and Ransomhub. Most affected sector: Professional Services.
Total posts
588
First seen
2022-02-04
Latest post
2026-10-19
Groups
113
Most active groups
- Lockbit3 39
- Thegentlemen 38
- Ransomhub 35
- Lockbit5 30
- Arcusmedia 23
- Akira 22
- 8base 20
- Babuk2 15
- Incransom 15
- Nova 12
Most targeted sectors
- Professional Services 110
- Manufacturing 90
- Technology 76
- Healthcare 57
- Agriculture and Food Production 48
- Retail & E-Commerce 40
- Transportation 40
- Education 31
- Government & Defense 28
- Energy & Utilities 18
Ransomware victims in Brazil per year
Latest 100 victims
Search every post in the full table.| Victim | Group | Sector | Discovered |
|---|---|---|---|
| GTL Concreto e Logística LTDA | Emperador | Manufacturing | |
| Prafesta Ind. e Com. de Embalagens Ltda | N0n | Manufacturing | |
| Suhai Segurana Pessoal | Thegentlemen | Professional Services | |
| Pantanal Agricola | Thegentlemen | Agriculture and Food Production | |
| Hospital Sírio-Libanês | THE SEVEN DEADLY SINS | Healthcare | |
| CLIMEDI | Thegentlemen | Healthcare | |
| Universidade de Passo Fundo | Thegentlemen | Education | |
| Brame Telecom | Qilin | Technology | |
| MPI LTDA | Emperador | Other | |
| FINANCIAMENTO LTDA | Incransom | Financial Services | |
| MyM ODONTOCLINICA S.A | Emperador | Healthcare | |
| Company #65 | N0n | — | |
| Cooper Tec Solutions | HYFLOCK | Technology | |
| Guarufilme | Vexy Ransomware | Other | |
| Santos Brasil (port operations) | N0n | Transportation | |
| Portonave (container terminal operations) | N0n | Transportation | |
| Superterminais (port terminal operations) | N0n | Transportation | |
| T2S (terminal systems operations) | N0n | Transportation | |
| AETHOS | Arcusmedia | — | |
| iDentalSoft | Termite | Healthcare | |
| SOCOCO | UmBra | Technology | |
| dipecarr.com.br | Eclipse | Manufacturing | |
| DIPECARR | Eclipse | Other | |
| INI Fiocruz | Nightspire | Healthcare | |
| Petrosul Distribuidora, Transportadora e Comércio de Combustíveis Ltda. | Dragonforce | Energy & Utilities | |
| Tec Imports | Incransom | Other | |
| Millensys | Medusalocker | Technology | |
| Softruck | Direwolf | Technology | |
| Paessolucoes | Panzer | Other | |
| Jampac Alimentos | Akira | Agriculture and Food Production | |
| FUNAP - Fundação "Prof. Dr. Manoel Pedro Pimentel" | Booba Project | Government & Defense | |
| Terca | Ransomhouse | Other | |
| latitudesubro.com | BrainCipher | Manufacturing | |
| somasolucoes.com | M3rx | Professional Services | |
| camorim.com.br | Lockbit5 | Retail & E-Commerce | |
| Amazon Informatica | Emperador | Technology | |
| Pantaneiro Capas | Arcusmedia | Manufacturing | |
| ANP Health | Thegentlemen | Healthcare | |
| anery.com.br | Lockbit5 | Agriculture and Food Production | |
| Grupo Caberj | Incransom | Manufacturing | |
| RECEITA FEDERAL DO BRASIL | Emperador | Government & Defense | |
| Metallco | Play | Manufacturing | |
| AKAZZO | Arcusmedia | — | |
| Cassias MG Government | Emperador | Government & Defense | |
| K3G Solutions Brazil | Panzer | Other | |
| Konnatus (usucapião legal services) | N0n | Professional Services | |
| fchhotels.com | Settra | Hospitality | |
| Vetta | Akira | Technology | |
| Javep Chevrolet | Akira | Retail & E-Commerce | |
| Humboldt | Thegentlemen | Other | |
| Multipla Contabilidade Empresarial | Thegentlemen | Professional Services | |
| Alicotrans | Qilin | Transportation | |
| Tuboaços da Amazônia Ltda. | Nightspire | Manufacturing | |
| amorsaude.com.br | Lockbit5 | Healthcare | |
| Logar Network Solutions | Vexy Ransomware | Technology | |
| Mutant | Thegentlemen | Other | |
| Zanini | Thegentlemen | Manufacturing | |
| Biotipo Jeans | Thegentlemen | Retail & E-Commerce | |
| Alurwalls | Dark Project | Manufacturing | |
| Lider Aviacao | Thegentlemen | Transportation | |
| ialegre.com | Settra | Other | |
| Engefitas | Vexy Ransomware | Manufacturing | |
| Oportunidados | Direwolf | — | |
| Exacta Optech Labcenter | Thegentlemen | Healthcare | |
| frm.ind.br | ZaWoo | Other | |
| Uniguacu | Emperador | Other | |
| amzur.com | Unsafe | — | |
| TEC Container | Thegentlemen | Manufacturing | |
| www.neooftalmo.com.br | Krybit | Healthcare | |
| sysconth.com | Krybit | Technology | |
| vascara.com | Krybit | Retail & E-Commerce | |
| Frato | Dragonforce | Other | |
| Brazil Mobilemed: Cloud PACS Platform | Kazu | Healthcare | |
| Meducar: Telemedicine and Patient Management System | Kazu | Healthcare | |
| Prefeitura Municipal de Arcos | Emperador | Government & Defense | |
| Vermont XCenter | Dragonforce | — | |
| TOTVS | Direwolf | Technology | |
| VR Advogados | Barracuda | Professional Services | |
| tecnoabi.com | M3rx | Technology | |
| Megalaser Industria Metalurgica LTDA | Thegentlemen | Manufacturing | |
| Vector Two Technology | Thegentlemen | Technology | |
| Chat Jurídico | Direwolf | Professional Services | |
| Alya Construtora | Ransomhouse | Manufacturing | |
| uva.edu.br | L Group | Education | |
| brdigital.net.br | L Group | Technology | |
| Intranet Gov Brasil | Thegentlemen | Government & Defense | |
| PontoBR Sistemas | Spacebears | Technology | |
| cesmac.edu.br | Krybit | Education | |
| eSysTech | Orova | Technology | |
| rai.com.br | Lockbit5 | Other | |
| CRB group | Thegentlemen | Professional Services | |
| The Municipal Chamber of Serra | Thegentlemen | Government & Defense | |
| Sinop Energia | Global Secret Group | Energy & Utilities | |
| SPDM | Global Secret Group | Healthcare | |
| Power Moendas | Arcusmedia | Other | |
| msgas.com.br | Blackwater | Energy & Utilities | |
| Cpcg | Qilin | Other | |
| Reni Farmácias Associadas | Doommageddon | Healthcare | |
| PP+K | Qilin | Manufacturing | |
| Jota Joias Premium | Nova | Retail & E-Commerce |