DragonForce Claims 1.52 TB FGV Data Leak; Foundation Says Intrusion Is Unconfirmed
Summary
DragonForce claims it compromised 1.52 TB of FGV data and posted document images. FGV says it has no confirmation of intrusion or theft; a link to earlier service instability is unconfirmed.
Key points
- DragonForce claimed on its dark-web site that it compromised 1.52 TB of Fundação Getulio Vargas (FGV) data and posted document images.
- FGV said it had no confirmation of an intrusion or data theft and that earlier instability at some providers had been resolved.
- The posted documents appear to include internship forms, personnel event records and project proposals.
- The article says document details included personal identifiers, contact and address information, bank and salary details, student records, and internal documents and contracts.
- DragonForce’s post showed a 10-day countdown before file release and indicated a ransom demand, but did not disclose an amount.
- A possible connection between the claim and FGV system instability on February 19–20 remains unconfirmed; the earlier disruption’s cause was not established.
Article Details
- Victim Organization
- Fundação Getulio Vargas (FGV)
- Incident Type
- Alleged ransomware and data-theft incident. Dragonforce claimed FGV data was compromised; FGV said it had no confirmation of an intrusion or data theft. A separate earlier period of systems instability may or may not be related.
- Data Types Exposed
- Full names
- Dates of birth
- National identity numbers (RG)
- Tax identification numbers (CPF)
- Physical addresses
- Email addresses
- Telephone numbers
- Bank account details
- Employee salary and job-title information
- Student academic records
- Scholarship information
- Internal administrative documents
- Legal contracts
- Affected Records
- Unknown; no record count was reported.
- Affected Data Size
- Dragonforce claimed 1.52 TB of data was compromised; FGV had not confirmed an intrusion or data theft.
- Operational Impact
- FGV reported instability at some of its providers, which it said had been resolved. A separate incident affecting systems between February 19 and 20 reportedly caused instability in subsequent days; its cause was not established.
- Ransom Or Extortion
- Dragonforce's post reportedly displayed a ten-day countdown for releasing files and a period to pay a ransom. The ransom amount was not disclosed, and FGV did not confirm a breach or data theft.
- Claim Status
- claimed