Brazil’s Emergency Alert System Suspended After Cyberattack Triggers False Warnings
Brazil’s mobile phone emergency alert system was temporarily suspended following a suspected cyberattack that sent unauthorized warnings to devices across multiple states. The incident occurred early Saturday, when at least a dozen false alerts were disseminated through the country’s Civil Defense Alert system, which is designed to notify residents of natural disasters like floods and landslides.
The fraudulent messages, including one containing the word "misanthropy," were issued at the system’s highest emergency level, triggering loud alarms on phones even those in silent mode. Reports of the alerts came from São Paulo, Rio de Janeiro, Paraná, Mato Grosso do Sul, and the Federal District. Authorities have not determined how many devices received the messages, as the alerts were sent outside official protocols.
The National Protection and Civil Defense Secretariat responded by suspending the platform and blocking external access to its Public Alert Dissemination Interface. While Brazil’s Ministry of Integration and Regional Development confirmed there was no evidence of "structural damage" to the core system, the Federal Police launched an investigation into the unauthorized access. Preliminary findings indicate that attackers remotely triggered 10 alerts nine via cell broadcast technology and one via SMS using methods unrelated to the national civil defense network.
No suspects have been identified, and officials have not provided a timeline for restoring the system. National Secretary of Protection and Civil Defense Wolnei Wolff stated that a more secure version of the platform was already in development and would be deployed as soon as possible. The Civil Defense Alert system, which operates without requiring user registration, is critical for warning residents of severe weather and other life-threatening emergencies.
Source: https://therecord.media/suspected-cyberattack-triggers-false-emergency-alerts-brazil
Ministry of Defense cybersecurity rating report: https://www.rankiteo.com/company/ministry-of-defense
"id": "MIN1782138537",
"linkid": "ministry-of-defense",
"type": "Cyber Attack",
"date": "6/2026",
"severity": "100",
"impact": "6",
"explanation": "Attack threatening the economy of geographical region"{'affected_entities': [{'customers_affected': 'Residents in São Paulo, Rio de '
'Janeiro, Paraná, Mato Grosso do '
'Sul, and the Federal District',
'industry': 'Public Safety',
'location': 'Brazil',
'name': 'National Protection and Civil Defense '
'Secretariat',
'type': 'Government Agency'}],
'attack_vector': 'Remote triggering via cell broadcast and SMS',
'date_detected': '2023-10-07',
'date_publicly_disclosed': '2023-10-07',
'description': 'Brazil’s mobile phone emergency alert system was temporarily '
'suspended following a suspected cyberattack that sent '
'unauthorized warnings to devices across multiple states. The '
'fraudulent messages, including one containing the word '
"'misanthropy,' were issued at the system’s highest emergency "
'level, triggering loud alarms on phones even those in silent '
'mode.',
'impact': {'brand_reputation_impact': 'Potential erosion of public trust in '
'emergency alert system',
'downtime': 'Temporary suspension',
'operational_impact': 'Suspension of emergency alert platform, '
'blocking of external access',
'systems_affected': 'Brazil’s Civil Defense Alert system'},
'investigation_status': 'Ongoing',
'post_incident_analysis': {'corrective_actions': 'Development of a more '
'secure platform version',
'root_causes': 'Unauthorized remote access to the '
'alert system'},
'recommendations': 'Deploy a more secure version of the emergency alert '
'platform',
'references': [{'date_accessed': '2023-10-07', 'source': 'News Report'}],
'response': {'containment_measures': 'Suspension of the platform, blocking '
'external access to Public Alert '
'Dissemination Interface',
'incident_response_plan_activated': 'Suspension of platform, '
'blocking of external access',
'law_enforcement_notified': 'Federal Police',
'remediation_measures': 'Development of a more secure version of '
'the platform'},
'title': 'Brazil’s Emergency Alert System Suspended After Cyberattack '
'Triggers False Warnings',
'type': 'Unauthorized Access'}