Brazil
BRA
Localiza websites taken offline after security incident
In the early hours of 11/01/2022, Localiza experienced a security incident that took parts of its systems and websites offline, with some users redirected to adult content. The company restored services the same day and reported no evidence of database access or personal data extraction. The LAPSUS$ group claimed responsibility via Telegram, stating the site was modified.
30
Estimated severity
30 / 100
87
Source reliability
87 / 100
Approximate Date
11/01/2022
Targeted Company
LOCALIZA
Targeted Company Supply Chain Impact
Distribution & Fulfillment
Procurement & Sourcing
Production & Manufacturing
Sales (Retail & Ecommerce)
Warehousing
Service Delivery
Unrecognized Impact
Supply Chain Relations
No information
Geographic Impact
Country Targeted Company
Other Affected Countries
No other affected countries reported
Target country
Brazil
Affected countries
Brazil
Impacted regions
No information
Operational Impact
Duration
1 day
Financial impact (USD M)
No information
Impact types
Service unavailabilityOrder processing disruption
Affected sectors
Transportation
Affected departments
Information TechnologySales
Attack Profile
Attack types
Web application attackUnauthorized access
Attributed threat actors
LAPSUS$
Sources
Incident Sources
euronews.comhttps://www.euronews.com/next/2022/01/11/localiza-rnt-car-cyberitforum.com.brhttps://itforum.com.br/noticias/localiza-sofre-ataque-hacker-e-site-fica-fora-do-ar-durante-madrugadacanaltech.com.brhttps://canaltech.com.br/seguranca/localiza-sofre-ataque-cibernetico-e-consegue-restabelecer-sistemas-206461securityleaders.com.brhttps://securityleaders.com.br/localiza-sofre-incidente-de-segurancavalor.globo.comhttps://valor.globo.com/empresas/noticia/2022/01/11/localiza-sistema-fica-parcialmente-fora-do-ar-aps-incidente-de-segurana-ciberntica.ghtml