Universidade de Passo Fundo listed on thegentlemen leak site

• Ransomware group: thegentlemen
• Country: Brazil
• Sector: Education
• Announcement date: October 16, 2026

The Brazil-based Universidade de Passo Fundo has been listed on a leak site by the threat actor known as thegentlemen. The listing, which appeared on October 16, 2026, follows an alleged cyberattack targeting the educational institution.

The claimed incident

According to the announcement made by the group, the incident involving Universidade de Passo Fundo is claimed to have occurred on October 14, 2026. The threat actor, identified as thegentlemen, alleges that they have successfully obtained data belonging to the institution. Publicly available information regarding the specific activities, methods, or background of the thegentlemen group remains limited.

In many modern ransomware attacks, threat actors utilize leak sites to pressure victims through a tactic known as double extortion. In these scenarios, attackers not only encrypt an organization's systems to disrupt operations but also exfiltrate sensitive information. The threat actors then threaten to publish this stolen data on public forums or dedicated leak sites if the ransom demands are not met. This method increases the pressure on the victim by threatening their reputation and legal standing.

Details regarding the alleged data breach

At this stage, the threat actor has not provided specific details regarding the nature of the allegedly leaked information. No screenshots or detailed descriptions concerning the content or the specific types of files involved in the breach have been provided by the group.

• The listing names no specific data types.

When organizations face such threats, the lack of immediate information regarding the scope of the breach can complicate the initial response. Without knowing exactly what was taken, it is difficult to determine the full extent of the exposure. Security professionals often monitor these leak sites to verify claims and assess the potential impact on the organization's privacy and operations.

About Universidade de Passo Fundo

Universidade de Passo Fundo (UPF) is a private, philanthropic university located in Passo Fundo, Rio Grande do Sul, Brazil. Founded in 1968, the institution is recognized for its academic programs in fields such as medicine, pharmacy, engineering, and law. The university serves a large community, providing education to thousands of students across multiple campuses.

Potential impact and organizational considerations

This incident may pose a risk of exposure for personal data belonging to students, academic staff, and administrative personnel. The potential exposure of such data can lead to various secondary risks, including identity theft or the execution of targeted phishing campaigns against the individuals involved. Furthermore, the operational impact on the institution's educational and research activities may vary depending on the accessibility of the systems affected by the incident.

From a regulatory perspective, under Brazil's LGPD (Lei Geral de Proteção de Dados), the institution may face notification obligations and potential administrative sanctions following a data breach. Compliance with data protection laws is a critical component of modern institutional governance, especially for organizations handling large volumes of personal information.

To mitigate the risks associated with such incidents, organizations in the education sector often implement various defensive measures. These include maintaining robust backup systems, implementing multi-factor authentication, and conducting regular security awareness training for staff and students. Additionally, continuous monitoring of network traffic and the implementation of endpoint detection and response tools are common practices used to identify and respond to unauthorized access attempts before data exfiltration can occur.