Illustration: Group claims leak of millions of CAPES records
Dados de e-mail · Breach

[Single source] Group claims leak of millions of CAPES records

· 1 min read

HSRgroup claims to have leaked data from CAPES, a Brazilian federal agency under the Ministry of Education. The group published a sample and says the dataset includes millions of email addresses, phone numbers, and banking records.

WhatsApp LinkedIn X
CriticalBreachNo software to update

In 30 seconds

DarkWebInformer
Alleged

The latest available update does not confirm a CAPES breach. A social media post says HSRgroup claims to have released a sample containing CAPES data and offered access to the remainder, but the post explicitly labels the claim unverified.DarkWebInformerx.com · DarkWebInformer · xOpen original sourceSee in source list

What happened

Alleged

DarkWebInformer reported that HSRgroup claimed to have obtained data from CAPES, the Brazilian federal agency that supports and evaluates graduate education. The advertised material allegedly includes email addresses, phone numbers and banking records.DarkWebInformerx.com · DarkWebInformer · xOpen original sourceSee in source list

Why it matters

Inferred

If authentic, the combination of contact and banking information could support convincing phishing, impersonation and financial fraud attempts. The possible impact cannot yet be measured because neither the dataset nor its connection to CAPES has been independently validated in the supplied evidence.DarkWebInformerx.com · DarkWebInformer · xOpen original sourceSee in source list

What to do

Inferred

People connected to CAPES should treat unexpected messages, payment requests and account verification links with extra caution. Use official channels to check suspicious requests, avoid reusing passwords and monitor financial accounts, while remembering that the reported exposure remains unverified.DarkWebInformerx.com · DarkWebInformer · xOpen original sourceSee in source list

Confirmed and still uncertain

Observed

The available post establishes that a public claim and an attached image circulated. It does not establish whether the sample is genuine, whether the records came from CAPES systems, when any acquisition occurred, how many people are affected or whether CAPES has confirmed an incident.DarkWebInformerx.com · DarkWebInformer · xOpen original sourceSee in source list

What people are saying

Alleged

DarkWebInformer says HSRgroup published a sample and is offering access to the remaining material. The account also says the dataset contains more than 4 million email addresses, more than 4 million phone numbers and over 1 million banking records, while warning that the claim is unverified.DarkWebInformerx.com · DarkWebInformer · xOpen original sourceSee in source list

Evolution

Alleged

The reported sequence begins with HSRgroup allegedly advertising CAPES related data, continues with the purported publication of a sample and an offer involving the rest, and ends with the claim being amplified publicly with an explicit verification warning. No later confirmation appears in the supplied evidence.DarkWebInformerx.com · DarkWebInformer · xOpen original sourceSee in source list

Reach

Observed

1 independent groups, 1 updates, and 0 engagements.

Technical detail

Observed

The supplied evidence provides no independent analysis of the sample, record schema, file size, timestamps, acquisition method or technical indicators connecting the material to CAPES infrastructure. A screenshot and on chain style tracing are not involved here, and the social post alone cannot authenticate the alleged source of the records.DarkWebInformerx.com · DarkWebInformer · xOpen original sourceSee in source list

Sources and evidence

Observed

The evidence batch contains a single X post by DarkWebInformer and its attached image. It is a secondary account of HSRgroup's alleged statements, not confirmation from CAPES, an affected person, a regulator or an independent technical investigation.DarkWebInformerx.com · DarkWebInformer · xOpen original sourceSee in source list

Sources

  1. DarkWebInformerx.com · DarkWebInformer · x

Incidents like this, every morning

The ones that need action first, in a 3-minute read.

Free · 1 email a day, in the morning · no spam, unsubscribe in 1 click

Get the next one tomorrow morning

One email a day with what changed, what to fix first and how.

Free · 1 email a day, in the morning · no spam, unsubscribe in 1 click

Share it with your team

Whoever handles security with you should get it too.

LinkedIn X

Your colleague gets a confirmation request. Nothing is sent unless they confirm.

See all news

Read also

Before you go: get this every day

The HIFY Radar daily edition lands every morning with the incidents that need action. Free.

Free · 1 email a day, in the morning · no spam, unsubscribe in 1 click