Ransomware activity in Brazil
94
Public victims
8
Active groups
8
Sectors hit
Source: Ransomware.live
Most active groups
thegentlemen (19) emperador (8) N0n (7) lockbit5 (5) direwolf (4) krybit (4) Vexy Ransomware (3) akira (3)
Most affected sectors
Other (15) Manufacturing (15) Technology (14) Healthcare (11) Professional Services (8) Transportation (6) Government & Defense (6) Not Found (6)
Recently listed organizations
| Organization | Sector | Listed |
|---|---|---|
| centratamagroup.com | Other | 2026-11-04 |
| Interativa Plasticos (Interplast) | Manufacturing | 2026-11-04 |
| GTL Concreto e Logística LTDA | Manufacturing | 2026-10-19 |
| Prafesta Ind. e Com. de Embalagens Ltda | Manufacturing | 2026-10-16 |
| Suhai Segurana Pessoal | Professional Services | 2026-10-16 |
| Pantanal Agricola | Agriculture and Food Production | 2026-10-16 |
| Hospital Sírio-Libanês | Healthcare | 2026-10-16 |
| CLIMEDI | Healthcare | 2026-10-16 |
| Universidade de Passo Fundo | Education | 2026-10-16 |
| Brame Telecom | Technology | 2026-10-15 |
| MPI LTDA | Other | 2026-10-15 |
| FINANCIAMENTO LTDA | Financial Services | 2026-10-14 |
| MyM ODONTOCLINICA S.A | Healthcare | 2026-10-14 |
| Company #65 | Not Found | 2026-10-13 |
| Cooper Tec Solutions | Technology | 2026-10-13 |
| Guarufilme | Other | 2026-10-13 |
| Santos Brasil (port operations) | Transportation | 2026-10-12 |
| Portonave (container terminal operations) | Transportation | 2026-10-12 |
| Superterminais (port terminal operations) | Transportation | 2026-10-12 |
| T2S (terminal systems operations) | Transportation | 2026-10-12 |
| AETHOS | Not Found | 2026-10-09 |
| iDentalSoft | Healthcare | 2026-10-09 |
| SOCOCO | Technology | 2026-10-08 |
| dipecarr.com.br | Manufacturing | 2026-10-08 |
| DIPECARR | Other | 2026-10-08 |
Is your domain exposed?
Run a free, instant security report for any domain — exposure score, email auth, TLS and breach metadata.
Get your free reportAll information is aggregated from public sources for awareness only and does not constitute an accusation or a security assessment. No personal data or credentials are published.