Brazil
BRA
Brazil’s Health Ministry hit by two ransomware attacks in one week
In December 2021, Brazil’s Ministry of Health suffered two cyberattacks four days apart. The first on 10/12/2021 took the ministry’s website and the ConecteSUS vaccination-certificate system offline; the second occurred on 13/12. LAPSUS$ claimed responsibility. Authorities reported data recovery underway by 12/12, but full restoration took longer, disrupting national digital health services.
65
Estimated severity
65 / 100
95
Source reliability
95 / 100
Approximate Date
10/12/2021
Targeted Company
MINISTÉRIO DA SAÚDE
Targeted Company Supply Chain Impact
Distribution & Fulfillment
Procurement & Sourcing
Production & Manufacturing
Sales (Retail & Ecommerce)
Warehousing
Service Delivery
Unrecognized Impact
Supply Chain Relations
No information
Geographic Impact
Country Targeted Company
Other Affected Countries
No other affected countries reported
Target country
Brazil
Affected countries
Brazil
Impacted regions
South America · Brazil
Operational Impact
Duration
No information
Financial impact (USD M)
No information
Impact types
Service unavailabilityOperational disruption
Affected sectors
Healthcare & Public HealthGovernment & Public Administration
Affected departments
Information Technology
Attack Profile
Attack types
RansomwareData exfiltration
Attributed threat actors
LAPSUS$
Sources
Incident Sources
g1.globo.comhttps://g1.globo.com/jornal-nacional/noticia/2021/12/10/ataque-hacker-ao-site-do-ministerio-da-saude-tira-do-ar-o-conectesus.ghtmlestadao.com.brhttps://www.estadao.com.br/saude/site-do-ministerio-da-saude-e-invadido-e-dados-ficam-indisponiveisband.com.brhttps://www.band.com.br/noticias/brasil-completa-uma-semana-com-problemas-nos-sistemas-no-ministerio-da-saude-16466647tecmundo.com.brhttps://www.tecmundo.com.br/seguranca/230354-ministerio-saude-recupera-dados-vacinacao-ataque-hacker.htm