2026 Brazil Civil Defense — cyberattack on official national alert notification platform
Data compromised
No confirmed personal-data exfiltration at catalog time; operational compromise of emergency alert infrastructure with unauthorized messages sent in Civil Defense's name
Technical writeup
On June 21, 2026 Brazil's Civil Defense (Defesa Civil) reported that its official alert system was targeted by a cyberattack under investigation by competent authorities. The platform used to send civil-protection notices was deactivated around 01:30 local time; attackers then maliciously reactivated it to push notifications to different areas of the country on behalf of someone outside the National System of Civil Protection and Defense. Demócrata and DataBreaches.net framed the incident as an infrastructure integrity event with potential life-safety impact rather than a mass PII disclosure. BreachHistory indexes recordsAffected 0; no victim notification letters or data categories were published at catalog time.
Root cause
Cyberattack targeting Brazil's Civil Defense alert-distribution platform; system deactivated ~01:30 local time then maliciously reactivated to send fraudulent nationwide notifications