MAPFRE Brasil · Breach

Destello Group Claims Theft of 9 GB from MAPFRE Brasil

Nov 04, 2026 · 1 min read

Extortion group Destello listed MAPFRE Brasil, the Brazilian arm of Spanish insurer MAPFRE, on its leak site. The group claims theft of about 9 GB across 735 files, verified access to systems, and the start of publication, with about 10% of the data staged. The Nov 4, 2026 claim is unverified and MAPFRE has not confirmed an incident.

By HIFY Radar newsroom Updated 11/04/2026 03:13 PM Get this every day →← Back to the feed 1 source

MediumBreachNo software to update

In this article

What happened
Why it matters
What to do
For the technical team
Timeline
Sources

What happened

Extortion group Destello listed MAPFRE Brasil, the Brazilian arm of Spanish insurer MAPFRE, on its leak site, claiming theft of about 9 GB across 735 files. The group claims verified access to systems and says publication has started, with about 10% staged. MAPFRE has not confirmed the incident and the claim is unverified.

Why it matters

MAPFRE is one of the largest insurers in Latin America, and insurance files often hold policyholder IDs, claims and health details, according to the source. If publication advances, customers could be exposed to scams. The source warns of phishing impersonating MAPFRE.

What to do

Monitor the Destello leak site and official MAPFRE channels. Prepare customer communications and warn about messages impersonating MAPFRE. Treat the claim with caution, as MAPFRE has been named by extortion groups in 2026 without confirming a breach.

For the technical team

Affected: MAPFRE Brasil, braço brasileiro do grupo segurador espanhol MAPFRE · MAPFRE Brasil, the Brazilian arm of Spanish insurer MAPFRE; systems and versions not specified in the sources.
Exploitation: Claim posted on the Destello extortion group's leak site and reported by DailyDarkWeb on Nov 4, 2026. No independent verification and no confirmation from MAPFRE.
Fix: No software to update
More details: The group says the ransom deadline has passed and about 10% of the data is already staged for publication. The source notes MAPFRE has been named by several extortion groups in 2026 without confirming a breach, and classifies the case as an unverified threat-actor claim, not confirmation of a breach.