Breaches and incidents
Tribunal de Justica de Mato Grosso (TJMT, Brazil): attackers obtain user logins and encrypted passwords, PJe taken offline
After an attack on Monday 21 Sep the court took its main systems including PJe offline.
- Disclosed
- Verification
- Confirmed by two or more outlets
What happened
- After an attack on Monday 21 Sep the court took its main systems including PJe offline; hackers accessed user logins and encrypted passwords, with no evidence of access to other personal data, court decisions or backups (Convergencia Digital); LegalCloud reports no signs of data misuse or backup compromise.
- Root cause: “uma vulnerabilidade provocada pela insercao indevida de um modelo de documento no sistema” (Convergencia Digital); LegalCloud says the document was inserted on the afternoon of Sunday 20 Sep.
- No attacker named.
- All passwords are being reset and sensitive access restricted; external service resumed 28 Sep while procedural deadlines stayed suspended until 30 Sep, resuming 1 Oct (Ponto na Curva).