Cyber Incident Victim: Prefeitura de Anitápolis
Date:
Apr 2025
Location:
Brazil
Summary
The municipal governmentof Anitápolis suffered a cyberattack that resulted in the unauthorized transfer of 1.6 million reais from its bank accounts. The diverted funds comprised parliamentary amendment allocations and education salary transfers, and were sent to companies with no known ties to the municipality, some located in other states and others within Santa Catarina. Following the incident, the mayor confirmed the breach, notified Caixa Econômica Federal, the state Secretariat of Public Security, the State Court of Accounts, and announced forthcoming contact with the Federal Police, while the Civil Police opened a confidential investigation.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 2 techniques |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On Tuesday, April 27, 2025, the municipal bank accounts of Prefeitura de Anitápolis were subjected to a cyber attack that resulted in the unauthorized transfer of R$1.6 million. Prefeita Solange Back confirmed that the transfers were carried out without any municipal authorization. The affected accounts are held at Caixa Econômica Federal, which was immediately notified of the incident. Authorities classified the event as a virtual theft, according to the Polícia Civil.
Following the discovery, the prefeitura activated its internal control and investigation mechanisms and informed Caixa Econômica Federal of the occurrence. In addition, the Secretaria de Segurança Pública de Santa Catarina and the Tribunal de Contas do Estado were notified, with plans to contact the Polícia Federal in the near future. The Delegacia de Anitápolis stated that investigations had been opened but were being kept under secrecy to preserve the integrity of the ongoing diligences. The Polícia Civil confirmed receipt of the formal communication from the municipality. The Polícia Civil emphasized that all necessary measures were being adopted to identify the origin of the invasion, understand the mechanics of the scam, and determine any third‑party involvement.
In a video statement, Prefeita Solange Back detailed that the diverted resources included parliamentary amendment funds and repasses from the salary‑education program. The unauthorized transfers were directed to companies that have no known relationship with the municipality, some of which are headquartered in other states while others are located within Santa Catarina. The prefeita affirmed that all necessary providências are being taken to resolve the matter and to restitute the diverted amounts to the municipal coffers. The case remains under investigation, with the involved agencies continuing their work under the imposed secrecy.