Emperador Claims Attack on Brazil’s Prefeitura Municipal de Arcos

Summary
The ransomware actor emperador claims it accessed and encrypted systems at Brazil’s Prefeitura Municipal de Arcos and exfiltrated 462.3 MB. The claim threatens publication and permanent loss unless the victim responds within 14 days; it is unconfirmed.
Key points
- The record names Prefeitura Municipal de Arcos, a Brazilian government entity, as the claimed victim and emperador as the actor.
- Emperador alleges unrestricted access to internal infrastructure and exfiltration of servers, databases, emails, and administrator credentials.
- The actor claims critical systems were encrypted and 462.3 MB of data was taken.
- The claim threatens publication and permanent data loss if the victim does not respond within 14 days.
- The post is attributed to ransomware.live and states that the claims could not be confirmed.
Article Details
- Victim
- Prefeitura Municipal de Arcos
- Claim Date
- 2026-08-18
- Encryption Status
- The actor claims critical systems were encrypted; this is unconfirmed.
- Exfiltration Status
- The actor claims data was exfiltrated; this is unconfirmed.
- Exfiltrated Data
- Internal servers, databases, emails, and admin credentials (as claimed by the actor).
- Exfiltrated Size
- 462.3 MB reported as the affected data size; the source does not independently verify it or explicitly identify it as the exfiltrated volume.
- Ransom Demand
- No ransom amount reported; a 14-day response deadline was stated.
- Leak Status
- Publication was threatened if there was no response; no publication is reported.
