Brazil’s Superior Tribunal de Justiça (Court System) Listed by ransomexx Ransomware Group: Ransomware Claim — What’s Alleged & What To Do
The Brazil’s Superior Tribunal de Justiça (Court System) Listed by ransomexx Ransomware Group (reported November 3, 2020) is an unverified claim; the data involved is undisclosed belonging to roughly unknown people. If you have an account with them, your information may now be circulating on the open web and with data brokers. Here’s exactly what happened, how to check if you were affected, and what to do next.
Inside the incident
The listing appeared on the ransomexx leak site on the reported date. The group claims to have stolen internal data from the court system. No figure for the number of people affected has been published, and the precise volume or contents of any exfiltrated files remain undisclosed in public reporting.
The group behind it: ransomexx
Ransomexx is a ransomware operation known for encrypting systems and copying data before demanding payment. Its typical approach includes publishing samples or lists of stolen files on a dedicated leak site when victims do not meet ransom demands. The group has previously claimed activity against organisations in multiple countries and sectors. In this case the listing on its site constitutes the group’s claim; independent confirmation of the data’s authenticity or scope has not been publicly established.
About Brazil’s Superior Tribunal de Justiça (Court System)
The Superior Tribunal de Justiça serves as Brazil’s highest court for non-constitutional federal matters, reviewing appeals from lower courts and handling cases involving federal law. Institutions of this type routinely process case files, party identifiers, legal submissions and administrative records that can contain personal and procedural information spanning years of litigation.
What data was at risk
The available information states only that internal files were exfiltrated. The exact categories of data, file counts or time periods covered have not been disclosed. Organisations of this kind commonly hold judicial records, party names, addresses, identification numbers and documents submitted in proceedings; whether any of these specific elements were among the claimed files cannot be confirmed from public sources.
The real-world impact
Exposure of internal court files could affect the privacy of individuals named in ongoing or historical cases and could complicate routine judicial processes if operational systems were disrupted. For the institution, such an event raises questions about the security of records that are expected to remain confidential. No verified reports of subsequent misuse of any specific records have been tied to this listing in available information.
Were you affected?
Individuals involved in proceedings before the Superior Tribunal de Justiça or who submitted documents to the court may wish to monitor their personal accounts and correspondence for unusual activity. Checking official court notifications and maintaining up-to-date contact details with legal representatives are prudent steps. Readers can also run a free exposure scan of their email address to see whether it appears in known breach data sets.
AICompiled with AI assistance from public sources and published under our editorial standards.
How this breach connects
More recent breaches
Fundo Nacional de Desenvolvimento da Educação Listed by ransomexx Ransomware GroupUnione dei Comuni Terre di Pianura Listed by ransomexx Ransomware GroupSociété de transport de Montréal (STM) (public transport agency) Listed by ransomexx Ransomware GroupR1 RCM (medical debt collection firm) Listed by ransomexx Ransomware GroupLatest breaches
Publicly posted by ransomexx — unverified claim, pending independent verification
Breach listings — particularly those originating from ransomware or leak sites — are third-party claims that may be unverified, incomplete, or inaccurate. A listing does not by itself confirm that a breach occurred or that any specific data was exposed. Severity is an automated assessment, not a definitive rating. Verification status is shown where available.
Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.