Ransomware activity in Brazil
99
Public victims
8
Active groups
8
Sectors hit
Source: Ransomware.live
Most active groups
thegentlemen (22) emperador (8) N0n (7) lockbit5 (5) krybit (4) direwolf (4) akira (3) incransom (3)
Most affected sectors
Technology (16) Other (15) Manufacturing (15) Healthcare (11) Professional Services (8) Government & Defense (7) Not Found (6) Transportation (6)
Recently listed organizations
| Organization | Sector | Listed |
|---|---|---|
| Sistel | Technology | 2026-11-05 |
| MAPFRE Brasil 2026 | Financial Services | 2026-11-05 |
| Solutis Tecnologias | Technology | 2026-11-05 |
| Coemi Imóveis | Retail & E-Commerce | 2026-11-05 |
| Secretaria de Estado de Saúde | Government & Defense | 2026-11-05 |
| centratamagroup.com | Other | 2026-11-04 |
| Interativa Plasticos (Interplast) | Manufacturing | 2026-11-04 |
| GTL Concreto e Logística LTDA | Manufacturing | 2026-10-19 |
| Prafesta Ind. e Com. de Embalagens Ltda | Manufacturing | 2026-10-16 |
| Suhai Segurana Pessoal | Professional Services | 2026-10-16 |
| Pantanal Agricola | Agriculture and Food Production | 2026-10-16 |
| Hospital Sírio-Libanês | Healthcare | 2026-10-16 |
| CLIMEDI | Healthcare | 2026-10-16 |
| Universidade de Passo Fundo | Education | 2026-10-16 |
| Brame Telecom | Technology | 2026-10-15 |
| MPI LTDA | Other | 2026-10-15 |
| FINANCIAMENTO LTDA | Financial Services | 2026-10-14 |
| MyM ODONTOCLINICA S.A | Healthcare | 2026-10-14 |
| Company #65 | Not Found | 2026-10-13 |
| Cooper Tec Solutions | Technology | 2026-10-13 |
| Guarufilme | Other | 2026-10-13 |
| Santos Brasil (port operations) | Transportation | 2026-10-12 |
| Portonave (container terminal operations) | Transportation | 2026-10-12 |
| Superterminais (port terminal operations) | Transportation | 2026-10-12 |
| T2S (terminal systems operations) | Transportation | 2026-10-12 |
Is your domain exposed?
Run a free, instant security report for any domain — exposure score, email auth, TLS and breach metadata.
Get your free reportAll information is aggregated from public sources for awareness only and does not constitute an accusation or a security assessment. No personal data or credentials are published.