Federal University of Sergipe Listed by vect Ransomware Group: Ransomware Claim — What’s Alleged & What To Do
Federal University of Sergipe was listed by the vect ransomware group on January 05, 2026, after internal files were exfiltrated in a ransomware attack. An undisclosed number of people may be affected; anyone connected to the university should check official notices and change passwords or monitor their accounts.
What happened
The listing indicates that internal files were exfiltrated during a ransomware attack. The group states a data volume of 150 GB and lists the status as negotiating, with a deadline noted as 3 days and 17 hours. No confirmed information has been released on when the intrusion began, how access was obtained, or whether any data has been published.
The group behind it: vect
Vect is a ransomware operator that maintains a leak site to list victims and pressure negotiations. Groups of this type commonly combine encryption of systems with the removal of files, then use the threat of disclosure to prompt payment. Public records of similar actors show repeated use of this approach across multiple sectors, though any specific statements about the Federal University of Sergipe remain limited to the current listing.
About Federal University of Sergipe
The Federal University of Sergipe is a public Brazilian institution that maintains records on enrolled students, employees, research activities, and institutional finances. Universities routinely store identification details, academic histories, and payment information. A breach at such an organization can affect large numbers of individuals whose data is retained for years after enrollment or employment ends.
What data was at risk
The listing refers to internal files without further breakdown. Organizations in the education sector typically hold student registration data, financial records, and personnel files, yet the precise contents of the exfiltrated material have not been confirmed beyond the general description provided.
Why it matters
Exposed student or financial records can be used for identity-related fraud or targeted scams. The university may face operational disruption while addressing the incident, and affected individuals have limited visibility into what exactly left the network.
If your data was in this claimed breach
Individuals connected to the university should treat any account linked to the institution as potentially exposed until more information is released. Practical steps include:
- Reviewing bank and government accounts for unusual activity.
- Changing passwords for any university-related services and enabling multi-factor authentication where available.
- Contacting the university directly for official guidance on next steps.
- Running a free exposure scan of your email address against known breach data.
AICompiled with AI assistance from public sources and published under our editorial standards.
How this breach connects
More recent breaches
Del Rey Listed by vect Ransomware GroupAuvo Listed by vect Ransomware GroupWas Madeiras Listed by vect Ransomware GroupMB Contabilidade Listed by vect Ransomware GroupLatest breaches
Publicly posted by vect — unverified claim, pending independent verification
Breach listings — particularly those originating from ransomware or leak sites — are third-party claims that may be unverified, incomplete, or inaccurate. A listing does not by itself confirm that a breach occurred or that any specific data was exposed. Severity is an automated assessment, not a definitive rating. Verification status is shown where available.
Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.