Porto Seguro

Porto Seguro, one of Brazil’s largest insurance groups with approximately 10 million clients, 13,000 employees, and an annual revenue of $5.1 billion, suffered a **ransomware attack**. The company disclosed the incident to the Securities and Exchange Commission but provided limited public details. While Porto Seguro stated that **no data leakage has been identified yet**, the long-term impact remains uncertain. The attack highlights the vulnerability of high-value targets in Brazil and globally, many of which underinvest in cybersecurity. The incident underscores the critical need for advanced threat detection and response mechanisms, such as behavioral analysis-based anti-malware solutions, to prevent execution of ransomware before it inflicts damage. Given the scale of Porto Seguro’s operations, the potential consequences—financial, reputational, or operational—could escalate if further breaches or data exfiltration are discovered.

Source: https://www.acronis.com/en/tru/posts/brazilian-insurance-giant-porto-seguro-hit-with-ransomware/

TPRM report: https://www.rankiteo.com/company/porto

"id": "por3692036090725",
"linkid": "porto",
"type": "Ransomware",
"date": "9/2025",
"severity": "50",
"impact": "1",
"explanation": "Attack without any consequences"

{'affected_entities': [{'industry': 'insurance',
                        'location': 'Brazil',
                        'name': 'Porto Seguro',
                        'size': '~13,000 employees, ~10 million clients, ~$5.1 '
                                'billion annual revenue',
                        'type': 'insurance group'}],
 'data_breach': {'data_exfiltration': 'No data leakage identified (as per '
                                      'company statement)'},
 'description': "Porto Seguro, one of Brazil's largest insurance groups, has "
                'fallen victim to a ransomware attack. The company disclosed '
                'the attack to the Securities and Exchange Commission, but '
                'little is publicly known about the details. Porto Seguro '
                'states that no data leakage has been identified as of now.',
 'impact': {'brand_reputation_impact': 'Potential risk due to high-profile '
                                       'nature of the attack'},
 'initial_access_broker': {'high_value_targets': "Likely due to company's size "
                                                 'and revenue (~10M clients, '
                                                 '$5.1B revenue)'},
 'investigation_status': 'Ongoing (limited details available)',
 'ransomware': {'data_exfiltration': 'No data leakage identified (as per '
                                     'company statement)'},
 'recommendations': 'Increased investment in cyber protection services, such '
                    'as advanced anti-malware engines with behavioral analysis '
                    '(e.g., Acronis Cyber Protect)',
 'references': [{'source': 'Cyber incident description (unspecified)'}],
 'regulatory_compliance': {'regulatory_notifications': 'Disclosed to '
                                                       'Securities and '
                                                       'Exchange Commission'},
 'response': {'communication_strategy': 'Limited public disclosure',
              'incident_response_plan_activated': 'Disclosed to Securities and '
                                                  'Exchange Commission'},
 'title': 'Ransomware Attack on Porto Seguro',
 'type': 'ransomware'}