Brazil's Receita Federal cited by Emperador

The Emperador ransomware group allegedly claimed Brazil’s Receita Federal as a victim and said it obtained 6.3 GB of information, according to secondary reports cited by Hackmanac, Techstart and Dexpose. The supposed leak would include personnel documents, taxpayer records, data tied to gov.br users and passwords, but there is still no official confirmation of a breach or of the files said to have been taken.

What did Emperador claim?

Emperador said it attacked Brazil’s Receita Federal and exfiltrated 6.3 GB of data, according to the secondary reports reviewed. The description includes documents linked to personnel, taxpayer records and material associated with gov.br users, along with passwords.

The reference to the case appeared on the group’s leak portal, according to Techstart. Dexpose repeated the same attribution and detailed the alleged exfiltration of personnel, customer and gov.br user information, together with passwords.

What is known about official confirmation?

So far, there is no independent official confirmation of a breach or of the release of the files announced, according to Techstart’s Spanish-language coverage. That point is central to how the case should be read, because at this stage the only verified element in the available material is the public claim attributed to the group and its appearance on a leak portal.

Hackmanac was the first of the sources provided to mention the public claim and the volume of data Emperador said it had. The other two reports, Techstart and Dexpose, agreed that the incident allegedly involved Brazil’s Receita Federal, but they did not provide official validation of the event.