LowBreach / campaignMonitoring

Rhysida ransomware group claims Minas Gerais state court on its leak site

RansomLook reports the Rhysida group listed a Minas Gerais state court on its leak site, unconfirmed; wait for an official statement from the court.

Published
Exploitation
No, only a ransomware leak-site claim reported by RansomLook, not independently confirmed

What happened

According to RansomLook, the Rhysida ransomware group has listed the state court of justice of Minas Gerais (Tribunal de Justica do Estado de Minas Gerais) on its leak site. RansomLook’s entry is dated 2026-11-07.

This is a claim made by the group. The court has not confirmed it, and no independent source has verified it. Only the headline could be reviewed, because the full article could not be read. These details are not confirmed:

  • whether any data was taken or encrypted
  • how the group says it got in
  • how much data is involved
  • whether there is a ransom demand

Am I affected?

Not confirmed. The available source does not say which systems, records or people might be involved. A leak-site listing on its own is not proof of a breach.

What to do now

  1. Wait for an official statement from the court before acting on the claim.
  2. If you work with the court, ask questions through your usual contacts there. Do not rely on the leak-site listing.
  3. Check the RansomLook entry for updates.

Sources