mytower.com.br listed on funksec leak site

• Ransomware group: funksec
• Country: Brazil
• Sector: Technology
• Announcement date: February 28, 2025

The funksec group claims a breach of mytower.com.br

The Brazil-based technology platform mytower.com.br has been listed on a leak site by the ransomware group known as funksec. According to the announcement made on February 28, 2025, the threat actors claim to have successfully compromised the organization's systems and exfiltrated a significant amount of data.

The funksec group has stated that they have allegedly obtained approximately 500 MB of data belonging to mytower.com.br. The group claims that they have exfiltrated user data and has issued a ransom demand to the organization. The threat actors have declared that if their specific demands are not met, the entire dataset will be published on the internet.

This type of tactic is a hallmark of double extortion ransomware attacks. In these scenarios, attackers do not merely encrypt a victim's files to disrupt operations; they also steal sensitive information to use as leverage. By threatening to release private data publicly, the attackers increase the pressure on the victim to pay the ransom, as the threat of a public leak can lead to significant reputational damage and legal consequences.

Alleged data contents and affected information

The announcement made by the funksec group claims that the stolen dataset contains approximately 16,000 user records. The group asserts that this information includes various sensitive details that could be used for malicious purposes if released.

The specific types of data mentioned in the claim include:

• User email addresses
• Phone numbers
• Physical addresses
• Password hashes
• Administrator details
• Payment records

The exposure of such a diverse range of data, particularly including administrative credentials and payment transaction logs, represents a high-risk scenario for the affected users. When password hashes and administrator details are compromised, it can lead to further unauthorized access within an organization's infrastructure. Furthermore, the presence of payment records and personal identifiers increases the risk of secondary exploitation.

About mytower.com.br

MyTower is a technology company based in Brazil. The organization provides cloud-based software solutions designed to optimize logistics processes and digitize supply chain management. Given its role in managing logistics and supply chains, the company handles critical data related to business operations and user transactions.

Risk assessment and industry implications

The alleged breach may pose a significant risk to the privacy of the institution's users. The exposure of payment and identity information could potentially lead to secondary attacks such as identity theft and financial fraud. For organizations operating in the technology and logistics sectors, such incidents highlight the critical importance of robust data protection frameworks.

Under Brazil's LGPD (Lei Geral de Proteção de Dados), the institution may face mandatory breach notification requirements and potential regulatory sanctions due to the nature of the data involved. Organizations must be prepared to comply with strict regulatory standards regarding the handling and reporting of personal data breaches.

Regarding the threat actor, public information concerning the funksec group remains limited. However, reports suggesting the use of AI-powered tools by the group may indicate that their attack automation capabilities could be significant. This suggests a level of sophistication that organizations must account for in their defensive strategies.

To mitigate such risks, organizations typically implement defensive measures such as multi-factor authentication, end-to-end encryption for sensitive data, and continuous monitoring of network traffic to detect unauthorized exfiltration. Regular security audits and adherence to data protection regulations are also essential components of a modern cybersecurity posture to defend against evolving ransomware threats.