Cyber Incident Victim: Tribunal Regional Federal da 5ª Região
Date:
Apr 2022
Location:
Brazil
Summary
A cyberattack targeted the regional federal justice system in Pernambuco, causing widespread system outages affecting judicial operations. The attack disrupted nearly all digital services except the PJe 2.x case management platform, while also disabling IP telephony systems. Virtual and in-person services were suspended indefinitely, with procedural deadlines extended during the disruption. The Pernambuco branch established a temporary website to maintain limited functionality while primary systems remained offline. Though the main website was eventually restored, broader operational recovery efforts continued as other regional federal courts experienced similar disruptions.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 2 motives | 2 techniques |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On or around April 6, 2022, a cyberattack disrupted the data network of the Federal Justice system in Pernambuco (JFPE), initially misreported as targeting the TRF-5 regional court. The attack caused widespread system unavailability, with only the PJe 2.x judicial process management platform—handling cases originating from Recursal Panels—remaining operational. All other judicial support systems, including the institution’s IP telephony (VoIP) infrastructure and the primary JFPE web portal, became inaccessible. The outage forced the suspension of all virtual and in-person services indefinitely, including public access to case management tools and communications via the disabled VoIP system. Procedural deadlines across affected cases were extended due to the operational paralysis. Initial technical recovery efforts focused on restoring minimal functionality, with IT teams activated immediately following the incident.
By April 7, 2022, the JFPE established a temporary website to provide limited services while primary systems remained offline. The institution confirmed ongoing restoration efforts but emphasized the indeterminate timeline for full recovery. Public communications, including an official notice from the TRF-5 Communications Division, detailed the scope of disruptions and procedural deadline suspensions. Although the main JFPE website resumed operations shortly after the attack, core judicial systems and telephony services remained impaired. The incident’s impact extended beyond Pernambuco, with São Paulo’s TRF-3 regional court also experiencing sustained outages from a separate cyberattack during the same period, highlighting broader vulnerabilities within the federal judiciary’s infrastructure.