Threat actor Barracuda targeted VR Advogados, a Brazilian law firm, claiming it neglected data storage and confidentiality, allegedly exposing clients’ documents, passport information, and powers of attorney by posting and sharing them on a Discord server. The actor states it has 3,000 client documents (about 10 GB) and threatens to sell the data due to lack of response, with the disclosure and alleged ransom demand affecting #Brazil.
Incident Details
- Victim: VR Advogados
- Sector: Professional Services
- Country: BR
- Actor: Barracuda
- Source: http://uvm6hk4wwstfddja5z5htgtlehmfyflffijz6iozsuqyacyibzxefkqd.onion
- Discovered: 2026-08-15T12:50:32.297287+00:00
- Published: 2026-08-15T12:50:11.612873+00:00
Information
- Neglected client personal data and violated data storage and confidentiality laws.
- Shared clients’ documents, passport information, and powers of attorney through a Discord server.
- Claimed access to 3,000 documents, including passports, powers of attorney, declarations, and personal and work-related correspondence.
- Threatened to sell the data if there is no response.
- Upcoming release; size: 10 GB; starting price: $30,000.
Disclaimer: This post is based on public claims made by the ransomware group "Barracuda". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.