Threat actor claims leak of 612-record SEDES-DF staff database
A threat actor claims on an underground forum to have leaked a staff database tied to SEDES-DF (Federal District Social Development Secretariat) in Brasília: 612 records with full names, internal phone extensions, government emails and unit acronyms. The claim is unverified and no Brazilian authority has confirmed an incident. The source assesses the data as a ready-made phishing target list against the agency; staff should treat suspicious contacts with caution.
What happened
A threat actor claims on an underground forum the leak of a 612-record staff database tied to SEDES-DF in Brasília: full names, internal phone extensions, government emails and unit acronyms. The claim has not been independently verified and no Brazilian authority has confirmed an incident.
Why it matters
According to the source, the data looks like a small internal staff directory rather than citizen or beneficiary data. Even so, names matched to official emails and units give attackers a ready-made target list for phishing, impersonation and pretexting against an agency that runs social assistance programs.
What to do
Warn staff about phishing attempts and tighten identity checks on contacts citing SEDES-DF extensions and units. Monitor use of the listed government emails and have the security team assess the claim.
For the technical team
- Affected
- Secretaria de Estado de Desenvolvimento Social do Distrito Federal (SEDES-DF) Base alegada de servidores da SEDES-DF, em Brasília; 612 registros com nomes completos, ramais internos, e-mails governa · SEDES-DF, Brasília; 612 claimed staff records.
- Exploitation
- No exploitation reported. Leak claim posted on an underground forum and reported by DailyDarkWeb; not independently verified.
- Fix
- Not applicable; no software fix.
- Vector
- Not described in the sources. The claimed data is an internal staff directory (names, extensions, emails, unit acronyms); how it was obtained is unknown.
- More details
- The source assesses the set looks like a small internal staff directory rather than citizen or beneficiary data, serving as a target list for phishing, impersonation and pretexting. No Brazilian authority has confirmed an incident.
Timeline
First report: underground forum listing claims leak of 612 SEDES-DF staff records.
Sources 1 source
- @DailyDarkWeb @DailyDarkWeb
