siapenet.gov.br Listed by apt73 Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On April 27, 2026, the domain siapenet.gov.br appeared in a listing published by the apt73 ransomware group. The entry states that internal files were exfiltrated during a ransomware attack. No information has been released on the number of people affected or on any subsequent confirmation of the claims. The reported summary indicates that SIAPE processes remuneration for civil servants under uniform federal rules. Beyond the group’s listing and this functional description, public details about the incident remain limited.

Inside the incident

Available information consists solely of the apt73 listing and the brief note on SIAPE’s payroll function. No dates of intrusion, descriptions of initial access, or statements on whether files were encrypted have been published. The number of records involved and any operational impact on salary processing are undisclosed.

The group behind it: apt73

apt73 is a ransomware operator that maintains a public leak site to list organizations it claims to have targeted. Groups of this type commonly combine file encryption with data exfiltration and then use the threat of publication to encourage payment. Their listings are presented by the actors themselves and constitute claims rather than independently verified events.

Who is siapenet.gov.br?

siapenet.gov.br is the public-facing interface for SIAPE, the Brazilian federal system that calculates and disburses pay for civil servants. The platform operates under national regulations that standardize federal compensation. Systems of this kind support routine administrative functions for a large workforce employed by the national government.

What data was at risk

The listing refers only to “internal files exfiltrated in ransomware attack.” The exact categories or volume of data have not been specified. Payroll platforms of this nature routinely process identifiers, employment records, and payment information, yet whether any of those categories were present in the exfiltrated material is unconfirmed.

Why it matters

Compromise of files from a federal payroll system can affect the privacy of civil servants whose compensation data are managed centrally. For the responsible agency, the incident illustrates the persistent difficulty of protecting networked systems that perform essential, high-volume administrative tasks.

Were you affected?

People who receive federal pay through SIAPE can review account statements and government portals for irregularities. Checking whether an email address appears in known public breach collections through a free exposure scan offers one practical step for assessing wider exposure.

AICompiled with AI assistance from public sources and published under our editorial standards.