Skip to content

Search Ransomware Intelligence

Jump to a group, country, industry or search victims.

Listed on a ransomware leak site

RECEITA FEDERAL DO BRASIL

gov.br

RECEITA FEDERAL DO BRASIL was listed on the Emperador and APT73 and BlackSuit leak site on Oct 19, 2023. Brandefense has recorded 4 separate claims against it. Information as of Oct 19, 2026.

Updated continuously · figures as of Oct 19, 2026
Claimed by
Emperador, APT73, BlackSuit
First listed
Oct 19, 2023
Claims recorded
4

4 Leak-Site Claims.

EmperadorConfirmed claim
Posted on the leak site
Sep 23, 2026
Collected by Brandefense
Sep 23, 2026
Data claimed
6.3 GB
Leak-site post text, written by the group
MINISTÉRIO DA FAZENDA SECRETARIA DA RECEITA FEDERAL DO BRASIL The archives contain several thousand documents with personnel and customer data, as well as all user date on gov.br with passwords. [Sector: Finance]
APT73Confirmed claim
Posted on the leak site
Jun 23, 2026
Collected by Brandefense
Jun 23, 2026
Data claimed
Not stated
Leak-site post text, written by the group
Gov.br, this is the official state digital platform and domain zone of the Brazilian Federal G...
BlackSuitConfirmed claim
Posted on the leak site
Feb 26, 2024
Collected by Brandefense
Jul 11, 2025
Data claimed
495 GB
Leak-site post text, written by the group
presidncia da repblica is a company that operates in the government industry. it employs 2,001-5,000 people and has $250m-$500m of revenue.
BlackSuitConfirmed claim
Posted on the leak site
Oct 19, 2023
Collected by Brandefense
Jul 12, 2025
Data claimed
Not stated
Leak-site post text, written by the group
Presidncia da Repblica is a company that operates in the Government industry. It employs 2,001-5,000 people and has $250M-$500M of revenue.

Get alerted the moment your company or a supplier is posted on a leak site.

Alert me
Other confirmed victims claimed by the same group
VictimClaimed byCountryIndustryData claimedPosted
GTL Concreto e Logística LTDA
gtlconcreto.com.br
EmperadorBRBrazilManufacturing2 GB
Luzco Ilumination
luzco.es
EmperadorESSpainEnergy and Utilities1.4 GB
MPI LTDA
mpiengenharia.com
EmperadorBRBrazilConstruction370 MB
CMC AUDITORES SRL
cmc.com.ar
EmperadorARArgentinaConsultingNot stated
Spelman Logistics
spelmanlogistics.com
EmperadorUSUnited StatesTransportation and Logistics920 MB
Imperial Diamond Jewellery
imperialdiamond.com
EmperadorUSUnited StatesRetail3.1 GB
Other confirmed victims in the same industry
VictimClaimed byCountryIndustryData claimedPosted
SQA Services Inc
sqaservices.com
N0nUSUnited StatesConsultingNot stated
WSBI-ESBG
wsbi-esbg.org
PlayBEBelgiumGovernment and Public SectorNot stated
Caretaker Landscape and Tree Management
caretakerlandscape.com
PearUSUnited StatesConsulting544 GB
Globeia Inc.
globeia.com
The-seven-deadly-sinsUSUnited StatesConsultingNot stated
fairfeelegalservices.com
fairfeelegalservices.com
INC RansomUSUnited StatesConsultingNot stated
The Excalibur Group
theexcaliburgroup.com
QilinUSUnited StatesGovernment and Public SectorNot stated

Get Real-Time Alerts, IOC Feeds And Takedowns.

The Brandefense platform watches every leak site for your company, vendors and executives, and acts on what it finds.

Figures as of Oct 19, 2026. Confirmed leak-site claims collected by Brandefense technologies and validated by Brandefense analysts.

Listed on a leak site means a ransomware group has claimed the company; it is not a confirmed breach. To request a correction or removal, contact Brandefense.