Cyber Incident Victim: Ministério Público do Estado do Amazonas
Date:
Jan 2023
Location:
Brazil
Summary
The Ministério Público do Estado do Amazonas experienced an attempted cyber intrusion targeting its DOMPE-AM electronic system, prompting immediate corrective maintenance that caused temporary unavailability. The organization's cybersecurity team swiftly detected and addressed the breach attempt, confirming no data compromise occurred as the isolated system architecture prevented unauthorized access to institutional information.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 5 techniques |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On January 9, 2023, the electronic system of the Diário Oficial do Ministério Público do Estado do Amazonas (DOMPE-AM) became unavailable due to corrective maintenance initiated by the institution's Directorate of Information and Communication Technology (DTIC). This maintenance was a direct response to an attempted invasion of the DOMPE system, which was promptly detected and addressed by the technical team. The incident occurred during normal operations, though the exact time of the attack attempt was not specified in public communications. The DTIC confirmed the attack was contained before any unauthorized access could be achieved, emphasizing their rapid identification of the intrusion effort. No additional systems beyond the DOMPE platform were reported as affected during this event. The organization did not disclose technical details about the nature of the attempted breach, such as attack vectors or tools used by the threat actors.
The primary operational impact was the temporary unavailability of the DOMPE-AM system throughout January 9, disrupting regular access to the official bulletin. The MPAM assured stakeholders that due to the isolated architecture of the DOMPE system, no institutional data leakage or unauthorized data access occurred during or after the incident. DTIC technicians conducted forensic analysis as part of the corrective maintenance to reinforce system integrity, though specific security enhancements implemented were not detailed publicly. Normal operations resumed following the maintenance period, with the press release published on January 10 confirming resolution. The incident prompted increased monitoring but did not result in reported financial losses, legal penalties, or secondary disruptions to other government systems according to available information. Public communications focused on transparency regarding the outage while maintaining confidentiality about technical countermeasures.