Breaches and incidentsBriefChecked against a primary source
Brazil Defesa Civil Alerta: attacker sends false “extreme” emergency alerts to phones in several states
Between 23:41 on 19 Jun and 01:23 on 20 Jun 2026, someone outside the civil defence system triggered 10 unauthorized alerts through the national Defesa...
- Disclosed
What happened
- Between 23:41 on 19 Jun and 01:23 on 20 Jun 2026, someone outside the civil defence system triggered 10 unauthorized alerts through the national Defesa Civil Alerta platform: nine by cell broadcast at the “Extremo” level (siren even on silent) and one by SMS, with the text “misantropia”. Reports came from Sao Paulo, Mato Grosso do Sul, Rio de Janeiro, Parana and the Federal District. The government said it could not yet calculate how many devices were reached (Konbriefing cites at least 30 million recipients; not confirmed by the government).
- Root cause: unauthorized access to the alert-publishing interface (IDAP); involved user accounts were suspended. How access was obtained was not disclosed.
- Attacker: not identified; Federal Police investigating.
- Response: platform taken offline at 01:30, external access to IDAP blocked, CTIR Gov notified, staged restoration, new hardened version in development.
Sources
- https://agenciagov.ebc.com.br/noticias/202606/policia-federal-investigar-alerta-falso-defesa-civil-alerta-invasao-hacker
- https://www.cm-alliance.com/cybersecurity-blog/june-2026-biggest-cyber-attacks-data-breaches-ransomware-attacks
This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.