SignalAtlas
Share a report
Confirmed

Brazil’s ANCINE discloses exposure of legacy static database

A compromised static database used for legacy business automation exposed registration data through 2019, including names, CPF/CNPJ and contacts. No reliable aggregate count is supplied.

Last updated: 2026-11-09

Overview

The agency identified the attack June 12; discovery is not substituted for occurrence. Its notice concerns an old static database used for SAD automation, not tax-secret information or the current Conecta.gov.br integration. Large attacker-claimed counts are not adopted.

Timeline

  1. Occurred
  2. Discovered
  3. Disclosed

  4. Attack identified.

  5. Official notice on the legacy static database published.

Organization response

The agency isolated the environment, notified CTIR, Receita Federal and ANPD, and investigated and strengthened controls.

What you can do

Check notices through the organisation’s genuine contact channels. Do not enter credentials or payment details through links in unexpected messages.

Sources

  1. Incidente de Segurança Cibernética na ANCINEANCINE · 2026-11-09

Related information

Share a report

No published information yet

Information appears here after source checks or moderation.

Comments and replies

Write a comment

No account needed. Comments appear immediately.

Do not post private names, addresses, passwords, or codes. Automatic masking is limited; review your content before submitting.