Brazil Archives - ICSSTRIVE

Brazilian Adhesive Product Maker, Engefitas Hit in Ransomware Attack

September 2, 2026

Brazilian manufacturer specializing in adhesive tapes and adhesive products, Engefitas, suffered a ransomware attack by the Vexy Ransomware group which reported the incident on their dark web site earlier this month.
Engefitas makes the specialized adhesive products for the packaging, automotive, construction, electronics, and manufacturing sectors,.
The Vexy Ransomware group is a new group, according to a report with SOCRadar’s Dark Web Monitoring service. It appears Engefitas as one of the initial victims of this new attack group. Vexy Ransomware claims to have stolen internal data when the group released some information September 3..

Third-Party Attack Hits Nissan

June 26, 2026

There was another incident related to the Oracle PeopleSoft software where attackers were able to steal the personnel records of hundreds of companies of which Nissan was the latest to report former and current employees ended up victimized.
“We have since learned that Nissan was specifically targeted in this attack,” according to an advisory dated Friday, June 26. “Upon learning about this issue, we quickly activated incident response protocols. We have been in communication with authorities throughout our response to this attack. Our technical teams, along with external experts, have secured our systems and will continue to work with Oracle to address this issue.”
Oracle’s PeopleSoft program manages employee records, payroll, and other personal data and in this case attackers were able to exfiltrate data accessed on Nissan’s systems.

Cybersecurity Breach Temporarily Halts IPEN Radioisotope Production

March 28, 2025

The Brazilian research Instituto de Pesquisas Energéticas e Nucleares (IPEN) in São Paulo suffered a cyberattack. IPEN/CNEN temporarily halted the production and supply of critical radioisotopes and radiofármacos, substances used across Brazil for medical diagnostics and cancer treatments. Production resumed in early April. Officials emphasized that the physical, radiological, and nuclear safety of the institute’s facilities was not compromised at any point.

Cyberattack Takes São Paulo Intl Airport Website Offline for Several Hours

March 15, 2025

A cyber incident occurred at GRU Airport, leaving its official website unstable and offline for several hours. The airport’s operations were not impacted, and all security protocols were adopted to restore the site. A hacker, identifying as “Azael”, claimed responsibility for the attack, which was announced prior to its execution.

Cyberattack at Brazilian Port of São Francisco do Sul

May 6, 2024

The Port of São Francisco do Sul released an official statement informing that, on Monday, the 6th, it suffered a cyber attack on its server, with the encryption of some data.

To prevent the spread of the attack, the systems were temporarily disabled, and the Port’s IT team, with support from service providers, managed to partially resume the system’s functionalities on May 7. The partial recovery of the system enabled the full resumption of port operations in less than 24 hours. The Port informs that it is still investigating the extent of the affected data.

Access control and security systems, such as automatic license plate reading, biometrics and CCTV are gradually being reinstated.

Cyberattack at São Paulo Sanitation Company

October 22, 2024

The Basic Sanitation Company of the State of São Paulo, Sabesp, announced on Tuesday (22) that it was the victim of a cyberattack, which resulted in instability in its digital network. Company immediately implemented security measures and activated its contingency plan to re-establish compromised systems. The company also assured that the attack did not affect the essential operations of water supply, collection and sewage treatment.

Broadcasting Operations Brought to Standstill at German Radiostation.

September 16, 2024

The Geretsried radio was the victim of a massive cyberattack, led by Russian hackers, who encrypted all the music files and demanded a high ransom. The management team and the board of directors are working at high pressure to solve the problem. Meanwhile, the radio station broadcasts an emergency program.

Giant Latin American Software Company TOTVS Hit by Cyberattack

October 1, 2024

“TOTVS was the target of a cyberattack and reacted quickly. The attack was carried out by the BlackByte group, known for its double extortion tactic. Although TOTVS has indicated that encryption is under control, there is evidence that *data exfiltration* was significant, with samples already circulating on the dark web.

This suggests that confidential information may have been compromised, increasing the challenge of containing the impact of the attack.

Norwegian Energy Company Investigating Cyberattack at Brazil Subsidiary

February 15, 2023

Norwegian energy services company Aker Solutions said a subsidiary company in Brazil has been subjected to a cyber attack on its IT systems.Aker Solutions said it does not yet know the full extent of the situation, and that a dialogue is being established with the authorities in Brazil about the incident.

In addition, its global IT organisation is working to resolve the situation with external expertise. “The attack is currently directed at CSE, and the attackers claim that they have entered the IT systems, encrypted digital files and locked access to data,” said the company, led by chief executive Kjetel Digre.

CSE is a fully-owned Aker Solutions subsidiary with 450 employees in Brazil. Its main business is providing maintenance and modifications services to oil and gas installations offshore Brazil.

Cyberattack at Vehicle Wheel Manufacturer in Brazil

December 5, 2022

Brazilian automobile components manufacturer Iochpe-Maxion announced that it had suffered a cyberattack on December 5 in its IT environment. The attack resulted in the unavailability of part of its systems and operations in some units in Brazil and abroad.

The company explained in a statement sent to the Brazilian Securities Commission that it had activated its security protocols to contain the cyberattack and isolated some of its systems to protect the environment. The company confirmed that, together with its specialized advisors, it was acting diligently and making every effort to identify the causes of the incident, determine its extent and mitigate its effects.

« Older Entries