TOTVS S.A. - The Cyber Security Incident Database (CSIDB)

Profile

Primary URL: totvs[.]com[.]br
Location: Brazil
Sector: Technology
Known incidents: 1 incident
Updated: 2026-10-07 05:47
Aliases: 2 aliases

Organisation tracking is available to eligible accounts.

Profile narrative

TOTVS S.A., also known simply as TOTVS, is a Brazilian software company that specializes in developing enterprise resource planning (ERP) and related business management applications. Its product suite includes solutions for financial management, supply chain operations, human resources, and customer relationship management, which are designed to help organizations streamline core processes. The firm markets its software to businesses of various sizes across multiple sectors, offering both on‑premise and cloud‑based deployment options. TOTVS is a publicly traded corporation, with its shares listed on the Brasil Bolsa Balcão (B3) under the ticker symbol TOTS3. The company’s headquarters are located in Brazil, reflecting its origins and primary operational base. Over time, TOTVS has expanded its reach beyond Brazil to serve customers in other Latin American countries.

In addition to its core software offerings, TOTVS invests in research and development to enhance platform functionality and integrate emerging technologies such as artificial intelligence and analytics. The company positions itself as a leading provider of business management solutions in the Latin American market, emphasizing local regulatory compliance and industry‑specific adaptations. Structural information indicates that TOTVS operates as an independent entity without a disclosed parent company, although it maintains subsidiaries that support regional sales and service delivery. On 30 August 2024, TOTVS experienced a cyberattack claimed by the BlackByte ransomware group, during which attackers reportedly exfiltrated data samples while encrypting systems. The organization activated its pre‑established security protocols to maintain service continuity for clients, though it did not publicly disclose the full scope of the breach or its potential impacts. This incident underscores the ongoing cybersecurity challenges faced by software providers handling sensitive customer data.

Incidents

1 incident linked to this organisation.