Funksec ransomware group lists hiway.com.br on its leak site

• Ransomware group: Funksec
• Country: Brazil
• Sector: Technology
• Announcement date: February 17, 2025

Funksec claims a data breach against hiway.com.br

The threat actor known as Funksec has listed the domain hiway.com.br on its leak platform, alleging that a data breach has occurred. This announcement was made on February 17, 2025, coinciding with the date the group claims to have carried out the attack. Such listings are a common tactic used by ransomware groups to pressure organizations into paying ransoms, often employing a strategy known as double extortion, where data is both encrypted and stolen to increase leverage.

In this specific instance, the Funksec group claims to have gained unauthorized access to the systems belonging to the entity. However, the evidence provided by the threat actor remains inconclusive. The screenshot shared by the group does not contain any evidence or data samples, as it displays a 404 error page, providing no confirmation of the actual contents of the alleged breach.

Details regarding the alleged leaked data

At this stage, there is no information or evidence regarding the nature of the allegedly leaked data. The listing does not specify the types of files, the volume of data, or the specific databases that may have been compromised. Furthermore, no ransom demand has been specified in the announcement.

The listing names no data types.

About hiway.com.br

Hiway is a technology company based in Brazil. The organization provides a variety of solutions to corporate clients, specializing in the fields of cloud computing, digital transformation, and managed IT services. Given its role in providing critical infrastructure and digital services to other businesses, the company operates within the technology sector.

Risk assessment and security implications

The claim made by the Funksec group may pose significant risks to the operational continuity of the entity. If a data breach has indeed occurred, the organization may face secondary risks, such as identity theft or targeted phishing attacks directed at its customers and employees. These types of follow-on attacks are common when sensitive organizational or personal information is exposed.

Because the entity operates in Brazil, a potential data breach could lead to legal obligations and sanctions under the LGPD (General Data Protection Law). Compliance with regional data protection regulations is a critical concern for any organization handling personal information within that jurisdiction.

Furthermore, there are claims regarding the group's use of AI-powered tools, which may increase the speed and complexity of their attacks. For organizations in the technology sector, it is advisable to review security controls and maintain robust defensive postures to mitigate the impact of such sophisticated threats. Common defensive steps for organizations facing these risks include implementing multi-factor authentication, maintaining regular offline backups, and conducting continuous monitoring of network traffic to detect unauthorized access early.