<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Vulnpocalypse: Incidents in Brazil</title><link>https://vulnpocalypse.dev/feeds/</link><description>Breaches and advisories naming victims in Brazil.</description><language>en</language><lastBuildDate>Thu, 12 Nov 2026 16:59:02 +0000</lastBuildDate><atom:link href="https://vulnpocalypse.dev/feeds/country-br.xml" rel="self" type="application/rss+xml"/><item><title>Mercado Bitcoin, Brazil&#x27;s largest crypto exchange, confirms cyberattack as tens of millions drain from the platform</title><link>https://vulnpocalypse.dev/advisories/mercado-bitcoin-cyberattack/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/mercado-bitcoin-cyberattack/</guid><pubDate>Mon, 09 Nov 2026 12:00:00 +0000</pubDate><description>Brazil&#x27;s Mercado Bitcoin confirmed a cyberattack; blockchain firms traced $40M–$48.6M drained from customer deposit addresses. Partners froze over $15M.</description><category>breach</category></item><item><title>FGC discloses unauthorized access to guarantee payout data in Brazil</title><link>https://vulnpocalypse.dev/advisories/fgc-discloses-unauthorized-access-to-guarantee-payout-data-in-brazil/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/fgc-discloses-unauthorized-access-to-guarantee-payout-data-in-brazil/</guid><pubDate>Thu, 05 Nov 2026 12:00:00 +0000</pubDate><description>The FGC in Brazil discloses unauthorized access to guarantee payout data; affected creditors should treat contacts citing their details with caution.</description><category>breach</category></item><item><title>Sport Club Corinthians Paulista: official website defaced with fake Lionel Messi signing</title><link>https://vulnpocalypse.dev/advisories/sport-club-corinthians-paulista-official-website-defaced-with-fake/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/sport-club-corinthians-paulista-official-website-defaced-with-fake/</guid><pubDate>Sat, 31 Oct 2026 12:00:00 +0000</pubDate><description>In the early hours of Saturday 31 Oct the club&#x27;s official site showed a fabricated note announcing the signing of Lionel Messi.</description><category>breach</category></item><item><title>Prefeitura de Mozarlandia (Goias, Brazil): municipal bank accounts hacked, loss estimated above BRL 3.8 million</title><link>https://vulnpocalypse.dev/advisories/prefeitura-de-mozarlandia-goias-brazil-municipal-bank-accounts-hacked/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/prefeitura-de-mozarlandia-goias-brazil-municipal-bank-accounts-hacked/</guid><pubDate>Wed, 21 Oct 2026 12:00:00 +0000</pubDate><description>The city said its bank accounts were hacked, &quot;com prejuizo estimado em mais de R$ 3,8 milhoes&quot; (CBN Goiania).</description><category>breach</category></item><item><title>Tribunal de Justica do Tocantins (TJTO, Brazil): suspected cyberattack takes portal and e-Proc offline, deadlines suspended</title><link>https://vulnpocalypse.dev/advisories/tribunal-de-justica-do-tocantins-tjto-brazil-suspected-cyberattack/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/tribunal-de-justica-do-tocantins-tjto-brazil-suspected-cyberattack/</guid><pubDate>Tue, 20 Oct 2026 12:00:00 +0000</pubDate><description>On Tuesday 20 Oct the court suspended external access to its institutional portal and electronic systems after identifying &quot;atividade considerada atipica&quot;...</description><category>breach</category></item><item><title>Prefeitura de Sao Paulo / Smart Sampa: surveillance system credentials and data exposed in a public repository for about 11 months</title><link>https://vulnpocalypse.dev/advisories/prefeitura-de-sao-paulo-smart-sampa-surveillance-system-credentials/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/prefeitura-de-sao-paulo-smart-sampa-surveillance-system-credentials/</guid><pubDate>Tue, 20 Oct 2026 12:00:00 +0000</pubDate><description>Per UOL reporting summarised by Tecnoblog, a public repository held 181 login and password combinations, registration data of more than 6,000 agents and...</description><category>breach</category></item><item><title>Prefeitura de Caiabu (Sao Paulo, Brazil): unauthorized transfers from five municipal bank accounts, about BRL 2.91 million</title><link>https://vulnpocalypse.dev/advisories/prefeitura-de-caiabu-sao-paulo-brazil-unauthorized-transfers-from/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/prefeitura-de-caiabu-sao-paulo-brazil-unauthorized-transfers-from/</guid><pubDate>Tue, 20 Oct 2026 12:00:00 +0000</pubDate><description>Police are investigating &quot;movimentacoes financeiras atipicas e nao autorizadas em cinco contas bancarias&quot; of the city carried out on Friday 16 Oct.</description><category>breach</category></item><item><title>Companhia Nacional de Abastecimento (Conab, Brazil): cyberattacks and intrusion attempts force access restrictions</title><link>https://vulnpocalypse.dev/advisories/companhia-nacional-de-abastecimento-conab-brazil-cyberattacks-and/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/companhia-nacional-de-abastecimento-conab-brazil-cyberattacks-and/</guid><pubDate>Tue, 20 Oct 2026 12:00:00 +0000</pubDate><description>Conab said on Tuesday 20 Oct that its systems and digital services &quot;tem sido alvo de ataques ciberneticos&quot;, describing intrusion attempts that pose risks...</description><category>breach</category></item><item><title>Prefeitura de Itabaiana (Sergipe, Brazil): unauthorized access to municipal IT system, about BRL 3 million withdrawn</title><link>https://vulnpocalypse.dev/advisories/prefeitura-de-itabaiana-sergipe-brazil-unauthorized-access-to/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/prefeitura-de-itabaiana-sergipe-brazil-unauthorized-access-to/</guid><pubDate>Fri, 16 Oct 2026 12:00:00 +0000</pubDate><description>The city said it identified on 6 Oct &quot;uma ocorrencia envolvendo o acesso indevido ao sistema de informatica do municipio&quot; with signs of financial fraud...</description><category>breach</category></item><item><title>Hospital Sirio-Libanes (Sao Paulo, Brazil): possible unauthorized access to internal reporting system for social projects</title><link>https://vulnpocalypse.dev/advisories/hospital-sirio-libanes-sao-paulo-brazil-possible-unauthorized-access/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/hospital-sirio-libanes-sao-paulo-brazil-possible-unauthorized-access/</guid><pubDate>Fri, 16 Oct 2026 12:00:00 +0000</pubDate><description>The hospital announced on Friday 16 Oct that an incident on 21 Sep hit an internal reporting system, not the general patient database, and may have exposed...</description><category>breach</category></item><item><title>Governo do Tocantins (Brazil): attack attempts force shutdown of state financial system Siafe-TO and transparency portal</title><link>https://vulnpocalypse.dev/advisories/governo-do-tocantins-brazil-attack-attempts-force-shutdown-of-state/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/governo-do-tocantins-brazil-attack-attempts-force-shutdown-of-state/</guid><pubDate>Mon, 05 Oct 2026 12:00:00 +0000</pubDate><description>The state&#x27;s integrated financial administration system Siafe-TO was suspended after cyberattack attempts were identified on Friday 2 Oct, and the...</description><category>breach</category></item><item><title>Banco de Brasilia (BRB): attack on judicial-deposit platform BRBJUS diverts BRL 43 million</title><link>https://vulnpocalypse.dev/advisories/banco-de-brasilia-brb-attack-on-judicial-deposit-platform-brbjus/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/banco-de-brasilia-brb-attack-on-judicial-deposit-platform-brbjus/</guid><pubDate>Tue, 22 Sep 2026 12:00:00 +0000</pubDate><description>A cyberattack led to the diversion of R$ 43 million held on the BRBJUS platform, from judicial deposits of the Tribunal de Justica da Bahia (TJBA).</description><category>breach</category></item><item><title>Tribunal de Justica de Mato Grosso (TJMT, Brazil): attackers obtain user logins and encrypted passwords, PJe taken offline</title><link>https://vulnpocalypse.dev/advisories/tribunal-de-justica-de-mato-grosso-tjmt-brazil-attackers-obtain-user/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/tribunal-de-justica-de-mato-grosso-tjmt-brazil-attackers-obtain-user/</guid><pubDate>Mon, 21 Sep 2026 12:00:00 +0000</pubDate><description>After an attack on Monday 21 Sep the court took its main systems including PJe offline.</description><category>breach</category></item><item><title>Prefeitura de Lontras (Santa Catarina, Brazil): systems breached, fraudulent transfers from municipal accounts</title><link>https://vulnpocalypse.dev/advisories/prefeitura-de-lontras-santa-catarina-brazil-systems-breached/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/prefeitura-de-lontras-santa-catarina-brazil-systems-breached/</guid><pubDate>Mon, 21 Sep 2026 12:00:00 +0000</pubDate><description>The city suffered a cyberattack on Friday 18 Sep in which &quot;os criminosos invadiram os sistemas&quot; and made fraudulent transfers from municipal bank accounts.</description><category>breach</category></item><item><title>Viacao Aguia Branca (Brazil): incident on ticket sales websites may have compromised data of 7,883 customers</title><link>https://vulnpocalypse.dev/advisories/viacao-aguia-branca-brazil-incident-on-ticket-sales-websites-may-have/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/viacao-aguia-branca-brazil-incident-on-ticket-sales-websites-may-have/</guid><pubDate>Wed, 16 Sep 2026 12:00:00 +0000</pubDate><description>The bus company confirmed a cybersecurity incident in environments linked to its official ticket-sales websites, and &quot;dados de 7.883 clientes podem ter...</description><category>breach</category></item><item><title>Brazil Defesa Civil Alerta: attacker sends false &quot;extreme&quot; emergency alerts to phones in several states</title><link>https://vulnpocalypse.dev/advisories/brazil-defesa-civil-alerta-attacker-sends-false-extreme-emergency/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/brazil-defesa-civil-alerta-attacker-sends-false-extreme-emergency/</guid><pubDate>Sat, 20 Jun 2026 12:00:00 +0000</pubDate><description>Between 23:41 on 19 Jun and 01:23 on 20 Jun 2026, someone outside the civil defence system triggered 10 unauthorized alerts through the national Defesa...</description><category>breach</category></item></channel></rss>
