Fatal Error

Profile narrative

Fatal Error is a threat actor known by that alias. The group is associated with China based on available location information. No other names or aliases have been publicly reported for this actor. The actor’s location is the only geographic detail currently attributed to it. Public sources do not provide additional biographical or organizational details about Fatal Error.

On September 4, 2018, Fatal Error claimed responsibility for accessing the database of Boa Vista SCPC, a Brazilian credit bureau. The claimed breach reportedly involved more than 350 million personal records belonging to the bureau’s customers. Boa Vista SCPC confirmed it was conducting an internal investigation to verify the alleged compromise. The company acknowledged the broader rise in cybersecurity risks within Brazil’s expanding digital financial sector. The incident was reported by local media and highlighted the growing threat to consumer data in the region. No technical details about the method of access were disclosed in the public reporting.

The article notes that cyber attacks have become more frequent in Brazil as internet and mobile phone usage for financial transactions increases. This contextual observation is attributed to the reporting source, not to any assessment of Fatal Error’s capabilities. No specific malware families, initial access vectors, or tooling styles have been linked to Fatal Error in the available sources. Likewise, no public attribution to a state sponsor, criminal consortium, or other affiliation has been established for the group. The location indicator of China remains the sole geopolitical fact associated with Fatal Error. Consequently, any description of the actor’s typical targeting beyond the single reported incident would be speculative. The profile therefore remains limited to the confirmed facts of the alias, location, and the 2018 claim against Boa Vista SCPC.

Incidents

Attributed incidents are available to members.