All ransomware incidents
Ransomware group thegentlemen hits Universidade de Passo Fundo
Universidade de Passo Fundo — a education target operating in BR has been listed by the thegentlemen ransomware group on 2026-10-14. The information below reflects what the threat actor has publicly claimed on their leak site; the details have not been independently verified.
Incident Report
| Target Organization | Universidade de Passo Fundo |
|---|---|
| Threat Group | thegentlemen |
| Summary | Universidade de Passo Fundo, a education organization in Brazil, was listed by the thegentlemen ransomware group on its leak site on 2026-10-16. |
| Date of Breach | 2026-10-14 |
| Discovery Date | 2026-10-16 |
| Region | BR |
| Target Domain | upf.br |
| Business Sector | Education |
| Severity | MEDIUM |
Claim by thegentlemen
upf.br Universidade de Passo Fundo private community philanthropic university in Passo Fundo, Rio Grande do Sul, Brazil — founded 1968 (Decree 62.835), run by the FUPF foundation, with 7 campuses, ~10,000 students, 486 professors (48% PhD), and 100,000+ alumni. It holds the maximum MEC institutional rating (5), ranks 6th among Brazil's best private universities and 5th in research nationally (RUF 2025), and is in the THE World 2026 ranking and top-300 globally for sustainability (GreenMetric). Flagships: Medicine (MEC concept 5, expanding from 750 to 2,000 students with R$ 60M invested), Pharmacy (MEC 5), Veterinary (Hospital Veterinário + 170-ha Cepagro), Engineering (chemical #5 nationally), and Law (70 years old). Financially healthy — R$ 60M annual surplus, independent audits published, board with civil-society oversight; ~70% of students get aid (ProUni, Bolsa Filantropia, FIES, CrediUPF). New rector for 2026–2030: Edison Alencar Casagranda (93% of votes, took office July 2026).
Posted by the thegentlemen threat actor on its public leak site. This is the group's own statement and has not been independently verified by HackerFeeds.
Sources
Disclaimer
HackerFeeds does not engage in the exfiltration, downloading, taking, hosting, viewing, reposting, or disclosure of any stolen information. All breach data reported here is sourced from publicly available threat intelligence feeds for awareness purposes only.