Ransomware threat profile: Brazil
Brazil ranks #7 worldwide for ransomware disclosures, with 532 victims in this database — 2.2% of the global total. The groups listing the most organisations here are Thegentlemen, Ransomhub and Lockbit5.
The most frequently listed industries in Brazil are Business Services, Manufacturing, Technology. Healthcare is especially exposed: an outage at a hospital or clinic can put patients at risk, which raises the pressure to pay quickly.
As a major economy with many large enterprises, Brazil is a consistent target for groups seeking large payments. Organisations here should weigh the active groups documented on this page when prioritising detection rules and incident-response planning.