Breaches and incidents

Prefeitura de Itabaiana (Sergipe, Brazil): unauthorized access to municipal IT system, about BRL 3 million withdrawn

The city said it identified on 6 Oct “uma ocorrencia envolvendo o acesso indevido ao sistema de informatica do municipio” with signs of financial fraud...

Disclosed
Verification
Checked against a primary source

What happened

  • The city said it identified on 6 Oct “uma ocorrencia envolvendo o acesso indevido ao sistema de informatica do municipio” with signs of financial fraud, and estimates about R$ 3 million was withdrawn from municipal accounts (city notice).
  • Root cause: unauthorized access to the municipal computer system; method not disclosed.
  • No attacker named; the city says preliminary information suggests other Sergipe municipalities may have been victims of the same crime.
  • Police reports were filed with the Policia Federal and Policia Civil, Caixa Economica Federal was notified, and the city hopes the money will be returned.