FUNAP - Fundação "Prof. Dr. Manoel Pedro Pimentel targeted by Booba Project

• Ransomware group: Booba Project
• Country: Brazil
• Sector: Government & Defense
• Announcement date: October 1, 2026

The threat actor group known as Booba Project has listed the Brazilian organization FUNAP - Fundação "Prof. Dr. Manoel Pedro Pimentel" on its leak site. According to the announcement made on October 1, 2026, the group claims to have successfully exfiltrated a significant amount of data from the organization's network.

The claimed attack event

The Booba Project has officially added FUNAP - Fundação "Prof. Dr. Manoel Pedro Pimentel" to its public leak site. Through this listing, the threat actors claim to have obtained 26 GB of data from the organization's internal network. While the group has made this claim, information regarding the specific identity and operations of the Booba Project remains limited, making it difficult to ascertain the full scope of their capabilities or history.

Ransomware attack patterns often involve a process where attackers gain unauthorized access to a network, move laterally to locate sensitive information, and then exfiltrate that data to an external server. Once the data is secured by the attackers, they often use a leak site to pressure the victim into paying a ransom. This specific incident was announced on the same day the group claims the attack occurred.

Details regarding the allegedly leaked data

Regarding the specific contents of the alleged breach, the threat actor has not provided any detailed information concerning the nature or the specific types of files that were taken. Furthermore, no screenshots were shared by the group to verify the authenticity of the stolen information. The listing names no specific data types.

In many modern cyberattacks, threat actors employ a tactic known as double extortion. In this scenario, the attackers do not just encrypt the victim's systems to disrupt operations; they also steal sensitive data before the encryption occurs. If the ransom is not paid, the attackers threaten to publish the stolen information on public leak sites. This creates a dual pressure point: the victim must deal with the immediate operational downtime caused by encryption and the long-term legal and reputational consequences of a public data leak.

About FUNAP - Fundação "Prof. Dr. Manoel Pedro Pimentel"

FUNAP is a public foundation operating within the state of São Paulo, Brazil. The organization plays a critical role in the social and professional rehabilitation of individuals within the penal system. It achieves this mission by managing various education and employment projects designed to support reintegration into society.

Potential implications and organizational risks

Given the nature of FUNAP's operations, the allegedly leaked data may contain sensitive government or administrative information. Such a breach could lead to significant disruptions in the organization's operational processes and may result in potential reputational damage. Furthermore, the public disclosure of such data can create secondary risks for employees or associated parties, including the possibility of identity theft and targeted phishing attacks.

From a regulatory perspective, the organization may face data breach notification obligations under Brazil's LGPD regulations. Organizations in the government and defense sector often face heightened scrutiny due to the sensitive nature of the data they manage, which can include personal information of vulnerable populations or administrative records.

To defend against such threats, organizations typically implement a multi-layered security approach. This includes maintaining robust backup solutions that are isolated from the main network, implementing strict access controls to limit lateral movement, and continuous monitoring of network traffic to detect unauthorized data exfiltration. Regular security awareness training is also a common defensive step to help staff recognize and avoid phishing attempts, which are frequently used as an initial entry vector for ransomware groups.