Brazil: Global Secret Group in ransomware case

The ransomware.live threat intelligence project identified Global Secret Group as the actor behind a ransomware incident targeting a Hospitals & Clinics organization in Brazil, discovered on July 26, 2026. The case appears in the victim map for Brazil published by the platform and adds to the activity that different monitoring dashboards have been tracking across the region.

What does the regional context show?

The regional picture shows that ESET reported a 16.5% increase in global ransomware attacks in the first half of 2026, along with 4,699 confirmed incidents. The company highlighted Qilin, The Gentlemen and Akira as the most active groups, accounting for 33.5% of all attacks, and said their main targets were business services, manufacturing and technology.

In Latin America, ESET said Brazil exceeded 100 victims, Mexico reached nearly 80, Argentina 39 and Colombia 33. In Chile, Qilin recorded a peak of 19 detections in January.

Which sectors appear most exposed?

The data shared by ransomware.live and the report cited by ITSitio point to sustained pressure on critical sectors with high operational exposure. In Brazil, the incident linked to Global Secret Group hit the health sector, while ESET's regional report placed business services, manufacturing and technology among the most frequent targets.

The available material also refers to victim dashboards for Brazil, Argentina, Chile and Mexico within ransomware.live, along with sector-specific reports and monitoring for the region. In that set of sources, Brazil stands out as one of the hardest-hit countries, followed by Mexico, Argentina and Colombia in ESET's confirmed victim count for the half-year.