mytower.com.br Listed by funksec Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

When a company that helps run apartment buildings and condominiums appears on a ransomware group's leak site, the people who live and work in those buildings have reason to pay attention. Residents, administrators and staff may have shared personal details, payment records or access credentials through the platform, and any exposure of those records can create lasting practical problems. Public information about the incident involving mytower.com.br remains limited, yet the listing itself is enough to warrant careful review of what is known and what steps individuals can take.

On 28 February 2025 the Brazilian real-estate technology firm mytower.com.br was listed by the ransomware group funksec. The group claims that internal files were taken during a ransomware attack. The number of people affected has not been disclosed, and independent confirmation of the full scope is still absent. For anyone whose data may sit inside those systems, the immediate concern is straightforward: whether personal or financial information has left the organisation's control and what that could mean in daily life.

What happened

According to the public listing, funksec claimed responsibility for a ransomware attack against mytower.com.br and stated that internal files had been exfiltrated. The report is dated 28 February 2025. No further technical details—such as the initial access method, the precise date of intrusion, the volume of data taken, or whether systems were encrypted—have been released in the available record. The number of individuals whose information may be involved is listed as unknown. At present the incident rests on the group's own claim that a breach occurred and that files were removed; no independent verification of those assertions has been supplied in the facts at hand.

The group behind it: funksec

Funksec is a ransomware operation that has appeared in public reporting as a double-extortion actor. Like many contemporary groups, it typically claims to steal data before encrypting systems and then threatens to publish the material on a dedicated leak site if a ransom is not paid. The group has listed multiple organisations across different sectors, often providing sample files or brief descriptions to support its claims. Its communications frequently emphasise the volume or sensitivity of the data it says it holds. In the present case the only specific assertion tied to mytower.com.br is the listing itself and the statement that internal files were exfiltrated; no additional statements from the group about this particular victim have been recorded in the available facts. Readers should treat the listing as an unverified claim until further evidence appears.

mytower.com.br and its sector

MyTower is a Brazilian company that supplies digital management tools for the real-estate sector. Its platform is designed to serve condominium administrators and residents, combining communication channels, financial controls and building-automation features into a single system. Organisations of this type routinely handle contact details, unit ownership records, payment histories, access credentials and internal operational documents. Because the service sits at the intersection of property management and everyday resident life, a compromise can reach both the company and the people who rely on it for day-to-day building operations. The sector as a whole has become an attractive target for ransomware groups precisely because the data it holds is both commercially useful and personally sensitive.

What data was at risk

The available facts state only that internal files were exfiltrated in a ransomware attack. No inventory of specific data categories—such as names, national identity numbers, bank details, email addresses or access logs—has been published. Organisations that provide condominium management platforms typically store resident contact information, financial transaction records, maintenance requests, administrative correspondence and system credentials. Whether any of those categories were among the files claimed by funksec remains unconfirmed. Until a more detailed disclosure appears, the exact contents of the material said to have been taken cannot be treated as established fact.

The real-world impact

For individuals, the practical risks centre on the possible misuse of personal or financial information. If contact details or payment records were among the files, residents could face targeted phishing, fraudulent invoices or attempts to social-engineer access to other accounts. Administrators and staff whose credentials or internal documents may have been exposed may confront similar threats. For the organisation itself, the listing can disrupt operations, require forensic investigation, notification obligations under Brazilian data-protection rules, and the cost of remediation and customer support. Even when the full scale remains unknown, the mere claim of exfiltration creates uncertainty that both the company and its users must manage carefully. No evidence has been presented that the company was negligent; the facts simply record that a listing occurred and that internal files are said to have left its control.

Were you affected?

If you are a resident, administrator or employee who has used mytower.com.br services, treat the possibility of exposure seriously even while details remain limited. Monitor bank and credit-card statements for unfamiliar charges, be alert to unexpected messages that reference your building or unit, and consider changing passwords on any accounts that may have shared credentials with the platform. Enable multi-factor authentication wherever it is available. You can also run a free exposure scan of your email address to check whether that address has already appeared in known breach data sets; such a scan will not confirm or deny involvement in this specific incident, but it can indicate whether your information has surfaced elsewhere and help you prioritise further protective steps.

AICompiled with AI assistance from public sources and published under our editorial standards.