All ransomware incidents
Ransomware group thegentlemen hits Secretaria de Estado de Saúde
Secretaria de Estado de Saúde — a government & defense target operating in BR has been listed by the thegentlemen ransomware group on 2026-11-02. The information below reflects what the threat actor has publicly claimed on their leak site; the details have not been independently verified.
Incident Report
| Target Organization | Secretaria de Estado de Saúde |
|---|---|
| Threat Group | thegentlemen |
| Summary | Secretaria de Estado de Saúde, a government & defense organization in Brazil, was listed by the thegentlemen ransomware group on its leak site on 2026-11-05. |
| Date of Breach | 2026-11-02 |
| Discovery Date | 2026-11-05 |
| Region | BR |
| Target Domain | saude.mt.gov.br |
| Business Sector | Government & Defense |
| Severity | MEDIUM |
Claim by thegentlemen
saude.mt.gov.br The Secretaria de Estado de Saúde de Mato Grosso is the state health department of Mato Grosso, Brazil, responsible for public healthcare across 141 municipalities and 3.6 million inhabitants. Headquartered in Cuiabá under Secretary Renata Aparecida Barbirato, it manages state hospitals, laboratories, blood centers and the AFFARMES free medication program. Its network includes the Julio Müller General Hospital, the Tropical Diseases Hospital, the Maternal-Infant Hospital, UPA emergency units and the LACEN state laboratory. In 2026 it launched new water quality monitoring programs and updated its vaccination calendar including COVID-19 and tropical disease campaigns. The department runs an open procurement portal for medical equipment and pharmaceuticals with a budget of approximately 4 to 5 billion reais. Digital transformation initiatives include electronic health records, the SEI-MT document system and integration with Brazil's national health data network.
Posted by the thegentlemen threat actor on its public leak site. This is the group's own statement and has not been independently verified by HackerFeeds.
Disclaimer
HackerFeeds does not engage in the exfiltration, downloading, taking, hosting, viewing, reposting, or disclosure of any stolen information. All breach data reported here is sourced from publicly available threat intelligence feeds for awareness purposes only.