Ransomware Attack Disrupts UCSal Labs and Postpones Classes in Salvador

Summary
UCSal says it contained unauthorized access in a Wallstreet Ransomware attack that disrupted Software Engineering labs and threatened student and faculty SQL databases. Network instability led to postponed academic activities.
Key points
- The attack on the Catholic University of Salvador was attributed to Wallstreet Ransomware.
- Software Engineering school laboratories were affected, and computers and servers were blocked.
- Attackers threatened to leak SQL databases containing student and faculty data.
- UCSal said it contained the unauthorized access.
- Security measures caused network instability, and some academic activities were postponed.
Article Details
- Victim Organization
- Catholic University of Salvador (UCSal)
- Victim Domain
- ucsal.br
- Incident Type
- Ransomware attack involving Wallstreet Ransomware
- Disclosure Date
- 2026-09-14
- Data Types Exposed
- Student and faculty data in SQL databases; attackers threatened to exfiltrate the databases, but exfiltration was not confirmed.
- Operational Impact
- Software Engineering school laboratories were affected, computers and servers were blocked, network instability followed, and some academic activities were postponed. UCSal said it contained the unauthorized access.
- Ransom Or Extortion
- Attackers threatened to exfiltrate SQL databases containing student and faculty data. No ransom demand or confirmed data leak was reported.
- Claim Status
- confirmed
