Gov.br Brazil Data Breach 2023 Leaked Online |

Gov.br Brazil Data Breach 2023 Leaked Online.

Gov.br is the digital platform for citizen relations with the Brazilian federal government that began to operate on July 31, 2019. It was established by presidential decree, on April 11th, 2019, with the 31st of December 2020 as the final date for all organs and entities of the federal public administration to transfer their e-mail addresses to one single platform.

In 2022, the threat actor Everest hacked into their infrastructure and exfiltrated 3 TB of data, which they put up for sale on both the Dark Web as well as the defunct Breached.vc cyber criminal forum.

It is unknown if they were able to sell the stolen data and access to gov.br system, but I did find another relatively small and unknown Ransomware group, with few victims on their list, but they have put up 234546 gov.br files for download at a total size of: 494.96GB.

They got access via a Windows users computer, with AutoDesk CAD files, Japonese and Brazilian mp3-files.

Examples:

._3 Brasil_DRFI_Country_Cases_Final.pdf :: 177B
._AP - WorkShop seguros 141103.pdf :: 177B
._Apresentação Banco Mundial.pdf :: 177B
._Apresentação_GRRD_WorkshopBM.pdf :: 177B
._Banco Mundial_Painel II_Claudia Melo_Swiss Re.pdf :: 222B
._Brazil DRFI Presentation.pdf :: 177B
======================================
~$VIDAS DOS USUÁRIOS.docx :: 162B
1 - Processo Seletivo -SHE - Edital nº 306_2023 - Consolidado.xlsx :: 43.5KB
25B62776.tmp :: 150.65KB
3 Brasil_DRFI_Country_Cases_Final.pdf :: 784.23KB
AGENDA 2022 - Café com a DIREC.pdf :: 138.79KB
AP - WorkShop seguros 141103.pdf :: 4.13MB
Apresentação Banco Mundial.pdf :: 2.89MB
Apresentação_GRRD_WorkshopBM.pdf :: 2.7MB
Banco Mundial_Painel II_Claudia Melo_Swiss Re.pdf :: 925.32KB
Brasil_erodibilidade_solo.cpg :: 5B
Brasil_erodibilidade_solo.dbf :: 3.75MB
Brasil_erodibilidade_solo.prj :: 145B
Brasil_erodibilidade_solo.qml :: 17.25KB
Brasil_erodibilidade_solo.sbn :: 827.73KB
Brasil_erodibilidade_solo.sbx :: 40.66KB
Brasil_erodibilidade_solo.shp :: 476.79MB
Brasil_erodibilidade_solo.shp.xml :: 8.52KB
Brasil_erodibilidade_solo.shx :: 668.1KB
Brasil_erodibilidade_solo.sld :: 6.75KB
Brasil_vulnerabilidade_inundacoes.cpg :: 9B
Brasil_vulnerabilidade_inundacoes.dbf :: 11.84MB
Brasil_vulnerabilidade_inundacoes.sbn :: 129.2KB
Brasil_vulnerabilidade_inundacoes.sbx :: 5.28KB
Brasil_vulnerabilidade_inundacoes.shp :: 3.1MB
Brasil_vulnerabilidade_inundacoes.shx :: 109.32KB
Brazil DRFI Presentation.pdf :: 1.97MB
CCOGI - Edital nº 306_2023 - Consolidado.xlsx :: 139.01KB
CESET - Edital nº 306_2023 - Consolidado.xlsx :: 153.7KB
COECO - Processo Seletivo -SHE - Edital nº 306_2023 - Consolidado.xlsx :: 43.62KB
COMUNICACAO_INTERNA - Acesso Remoto 1.docx :: 44.93KB
CONTROLE DE HORAS - ANA.xlsx :: 68.86KB
Controle de Processos e Documentos .xls :: 39.5KB
Currículo do Sistema de Currículos Lattes (Henrique Paiva de Paula) (2).pdf :: 423.37KB
DÚVIDAS DOS USUÁRIOS.docx :: 19KB
EDITAL 306.2023.pdf :: 291.51KB
ETAPAS DO EDITAL Nº 360.2023 - SHE.docx :: 12.42KB
Evento MIDR Entrega Outorgas - 15JUNHO2023-9h- COM EMAILS e TELEFONES.xlsx :: 13.13KB
Fortalecimento Institucional - Estruturação.pdf :: 2.2MB
LAYLA VALESKA PEGO LOPES COTAÇÃO RENOVAÇÃO AZUL.pdf 1.pdf :: 58.13KB
LISTA DE E-MAIL E CELULAR SERVIDORES DA SRE.xlsx :: 11.69KB
MAPEAMENTO DOS PROCESSOS - DEMANDA SRE - Atalho.lnk :: 2.46KB
Mini Currículo com FOTO.pdf :: 96.33KB
Nota_Tecnica_Mapa_Erodibilidade_30_11_2020_FINAL.pdf :: 130.43KB
Numero_de_Outorga_nao_Utilizado.pdf :: 33.08KB
Orçamento.xlsx :: 35.56KB
pedo_area.cpg :: 5B
pedo_area.dbf :: 413MB
pedo_area.prj :: 145B
pedo_area.shp :: 599.11MB
pedo_area.shx :: 895.86KB
Planilha de Controle de Recebimento de Convites de Eventos.xlsx :: 12.62KB
Relação de Celulares Institucionais.pdf :: 1.57MB
ROTINA SRE.docx :: 1.97MB
Secretários de Estado.xlsx :: 42.9KB
Solicitacao de Transporte - ST4.docx :: 149.99KB
========================================================
1302H.pdf :: 20.84KB
1303B.pdf :: 20.85KB
1303J.pdf :: 22.47KB
1304J.pdf :: 22.72KB
91300=2398N.pdf :: 94.36KB
95005=1335Z.pdf :: 101.43KB
95006=1338J.pdf :: 99.97KB
95009=1352H.pdf :: 61.09KB
Descritivo_AMPR.pdf :: 10.25KB
Descritivo_APLJ.pdf :: 10.44KB
Descritivo_BOAV.pdf :: 10.54KB
Descritivo_NAUS.pdf :: 12.31KB
Descritivo_SAGA.pdf :: 11.05KB
========================================================

BB-VT11_0810.16G :: 38.59KB
BB-VT11_0810.16N :: 37.07KB
BB-VT11_0810.16O :: 57.08MB
BB-VT11_0810.tps :: 25.87MB
========================================================
GCP24_0810.16G :: 6.95KB
GCP24_0810.16N :: 21.22KB
GCP24_0810.16O :: 8.76MB
GCP24_0810.tps :: 4MB
========================================================
PCL38_0810.16G :: 7.58KB
PCL38_0810.16N :: 16.15KB
PCL38_0810.16O :: 9.06MB
PCL38_0810.tps :: 4.13MB
PCL40_0811.16G :: 21.19KB
PCL40_0811.16N :: 33.26KB
PCL40_0811.16O :: 29.04MB
PCL40_0811.tps :: 13.21MB
========================================================
BB-VT12_0830.16G :: 30.37KB
BB-VT12_0830.16N :: 35.8KB
BB-VT12_0830.16O :: 47.68MB
BB-VT12_0830.tps :: 21.85MB
========================================================
GCP23_0831.16G :: 8.22KB
GCP23_0831.16N :: 16.79KB
GCP23_0831.16O :: 9.34MB
GCP23_0831.tps :: 4.25MB
PCL34_0830.16G :: 8.22KB
PCL34_0830.16N :: 18.05KB
PCL34_0830.16O :: 10.66MB
PCL34_0830.tps :: 4.85MB

========================================================

AGUA-PLUVIAL.dwg :: 5.57KB
AGUA-POTAVEL.dwg :: 5.6KB
ALIMETACAO-SEMAFORICA.dwg :: 6.21KB
ARVORES.dwg :: 5.02KB
BANDEIRA.dwg :: 4.59KB
BLOCOS.BLC :: 482.64KB
BOCALOBO.dwg :: 4.61KB
BREJO.dwg :: 5.01KB
CAMERA.dwg :: 5.44KB
capa cd.dwg :: 92.4KB
CONVENCAO.dwg :: 65.95KB
CORREIO.dwg :: 6.15KB
CURVA-CIRCULAR.dwg :: 102.07KB
DEFENSA.dwg :: 4.47KB
ENERGIA-ELETRICA.dwg :: 6.01KB
ESGOTO.dwg :: 6.74KB
FOLHA500.dwg :: 103.64KB
FORMATOS INCRA.blc :: 35.87KB
FORMATOS.BLC :: 5.07KB
GAS.dwg :: 7.41KB
hat-seccao.dwg :: 6.34KB
HIDRANTE.dwg :: 5.45KB
HOLOFOTE.dwg :: 4.83KB
LEGENDA.dwg :: 687.11KB
LIXEIRA.dwg :: 4.83KB
LOMBADA.dwg :: 6.26KB
LUM-DUPLA.dwg :: 5.76KB
LUMINARIA.dwg :: 4.7KB
MARCOZERO.dwg :: 111.67KB
NORTE.dwg :: 7.93KB
NORTE-G.dwg :: 7.5KB
NORTE-M.dwg :: 7.48KB
NUMERO.dwg :: 5.16KB
NUMEROC.dwg :: 5.58KB
OLEODUTO.dwg :: 13.3KB
ONIBUS.dwg :: 7.22KB
ORELHAO.dwg :: 4.93KB
ORELHAODUPLO.dwg :: 5.02KB
OUTDOOR.dwg :: 4.82KB
PARA-RAIOS.dwg :: 4.67KB
PICOLE.dwg :: 4.58KB
PLACA.dwg :: 5.37KB
POSTE.dwg :: 4.67KB
POSTE-FC.dwg :: 6.25KB
PRODUTOS-QUIMICOS.dwg :: 6.11KB
PVAP.dwg :: 5.87KB
PVE.dwg :: 4.54KB
PVL.dwg :: 6.2KB
PV-N-IDENTIFICADO.dwg :: 5.27KB
PVT.dwg :: 5.08KB
RELOGIO.dwg :: 5.45KB
RGCONGAS.dwg :: 9.46KB
RGSABESP.dwg :: 5.39KB
RIO.dwg :: 62.92KB
SEMAFORO.dwg :: 4.66KB
SETAFOLHA.dwg :: 6.12KB
SIMBOLOS.SMB :: 28.19KB
SOLEI.dwg :: 21.69KB
SOLEII.dwg :: 21.79KB
TABCOORD.dwg :: 8.66KB
TAPUME.dwg :: 4.91KB
TELEFONE.dwg :: 5.87KB
TORNEIRA.dwg :: 6.52KB
TROLEIBUS.dwg :: 5.59KB
VALVULACOMBUSTIVEL.dwg :: 4.97KB

========================================================

Now I can guarantee that whom is responsible for gov.br's infrastructure will deny that the data comes from them, but ANPD that are supposed to enforce the LGPD law, should be able to check this list against the governments system and whom this matches.

Will Brazilians ever learn ? I doubt it.... So far they they seem to be waiting until the device explodes in their face.