Ransomware Group Claims Attack on Cassias MG Government in Brazil
Summary
The ransomware group emperador claims it targeted Cassias MG Government in Brazil and exposed government credentials and personal, civil, and medical data. The publisher says the claims are unconfirmed.
Key points
- The record names emperador as the ransomware group claiming the attack; the publisher says it cannot confirm the claims.
- The claimed data includes government credentials, justice-panel access, police-related information, and financial-sector access.
- The group allegedly exposed personal and civil records, including RG/CIN records, birth certificates, and CPF identity numbers.
- The claim also includes medical data from Brazil’s public health system, SUS, and data from multiple departments.
- The post gives a negotiation deadline but does not specify its date.
- The listed discovery and publication dates are September 19, 2026.
Article Details
- Victim
- Cassias MG Government
- Victim Domain
- CASSIAS.MG.GOV
- Claim Date
- 2026-09-19
- Encryption Status
- Unknown; the source does not confirm encryption.
- Exfiltration Status
- Unverified; the source lists data categories but does not confirm exfiltration.
- Exfiltrated Data
- The ransomware-group claim lists government credentials and access to justice panels, financial-sector access, police-related information, personal and medical data from SUS, RG/CIN records, birth certificates, and CPF identity numbers. The source does not verify the claim.
- Ransom Demand
- Not disclosed; the source mentions a negotiation deadline but gives no demand amount.
- Leak Status
- A ransomware-group claim is reported; the source does not confirm that data was published or verify its authenticity.