CiberLATAMbywhalemate

Brazil Accounts for 51% of Ransomware Attacks on Latin

Brazil accounted for 51% of ransomware attacks against the health sector in Latin America in 2026

Whalemate Labs · AI-assisted researchPublished:2 min read

Brazil accounted for 51% of ransomware attacks against the health sector in Latin America in 2026, according to a figure reproduced by Saúde Digital News from IPNews. The Brazilian publication says many of those events appear in consolidated records, but not in public reports with details about the hospitals, clinics, or providers affected.

Regional leadership, but few public case details

Brazil accounted for 51% of ransomware attacks against the health sector in Latin America in 2026, according to the figure reproduced by Saúde Digital News from IPNews. The coverage highlights a key point, most of the incidents show up as "ocorrências registradas" rather than as publicly documented cases.

The material cited by Saúde Digital News says the report on Brazil and ransomware in health is based on consolidated data from cybersecurity vendors and industry consultancies. It also points to a gap between those aggregated statistics and the limited public disclosure of incidents at Brazilian hospitals, since many attacks are not made public beyond the numbers.

That lack of transparency makes it harder to identify which institutions were hit, how attackers got in, or what operational impact the events had. In the available material, there are no specific, detailed accounts of recent confirmed incidents against hospitals or other Brazilian health providers.

The regional backdrop that is known

For broader context, an explanatory piece from Aufiero Informática, based on Kaspersky 2024 data, says Latin America recorded more than 1.1 million ransomware attack attempts in a year. The same source says many of those attacks exploit compromised credentials and outdated software vulnerabilities.

Those vectors are also relevant for connected hospital infrastructure, according to the material provided. The mix of large-scale logs, exposed credentials, and unpatched systems helps explain why the health sector remains one of the most sensitive targets, even if public coverage in Brazil still does not show a long list of detailed incidents.

The Saúde Digital News piece makes that gap the central point. On one side are consolidated numbers placing Brazil at the top of the region. On the other, open information about the actual attacks remains limited.

Sources

View all