MSGás Cyber Incident May Have Exposed Customers’ Personal Data
Summary
MSGás confirmed a cyber incident in early July that may have exposed customer data, including CPF numbers and addresses. The company isolated affected systems, revoked access, fixed vulnerabilities and notified Brazil’s data protection authority.
Key points
- Customers were notified that names, CPF numbers, addresses and contact information may have been exposed.
- MSGás confirmed a cyber incident in its systems in early July; a ransomware attack was cited as a possible cause.
- The company has not said how many customers were affected, whether data was actually taken, or whether a ransom was demanded.
- MSGás said it isolated affected systems and equipment, revoked access credentials, fixed vulnerabilities and notified Brazil’s data protection authority, ANPD.
- The company warned that exposed personal information could increase risks of fraud, scams and social engineering, and advised customers to be cautious with suspicious messages.
Article Details
- Victim Organization
- MSGás (Companhia de Gás do Estado de Mato Grosso do Sul)
- Victim Domain
- msgas.com.br
- Incident Type
- Cyber incident reported as a ransomware attack; possible exposure of customer personal data
- Data Types Exposed
- Names
- CPF numbers
- Addresses
- Contact information
- Affected Records
- Not disclosed
- Affected Data Size
- Not disclosed
- Operational Impact
- The company isolated affected systems and equipment, revoked access credentials, and corrected vulnerabilities. The extent of system or business disruption was not reported.
- Ransom Or Extortion
- Whether the attackers demanded a ransom was not disclosed.
- Claim Status
- confirmed