Palmas, Tocantins, Brazil

The Tocantins State IT Agency serves as the central authority for information technology management across the state government of Tocantins, Brazil. Its core responsibility involves the development, maintenance, and security of official government digital portals and online services, which form the primary interface between the state administration and its citizens, businesses, and other public entities. This infrastructure supports a wide range of governmental functions, from public information dissemination to the delivery of essential state services. The agency's operational scope is confined to the geographic and administrative boundaries of Tocantins, making it a critical component of the state's public sector digital ecosystem. Its work ensures the continuity and accessibility of state government operations in the digital domain, a function that became acutely visible during a significant security incident.

In January 2023, the agency directly managed the response to a cyberattack that resulted in the unauthorized defacement of multiple state government websites. Attackers manipulated content to display altered images of the Brazilian president, prompting the agency to proactively take affected portals offline as a containment measure. This action, while causing temporary unavailability of public services, was part of a structured incident response protocol aimed at preventing further compromise. Restoration efforts were initiated immediately, though some services remained disrupted with a public error message the following day. The agency coordinated the technical investigation by activating the specialized cybercrime division of the Civil Police, demonstrating its established protocols for law enforcement collaboration in security matters. The incident, which involved no reported data loss, underscored the agency's role in defending the state's digital assets against politically motivated defacement campaigns targeting Brazilian public sector entities. Its handling of the event highlighted a focus on service restoration and forensic investigation within its mandate to safeguard the integrity and availability of state-run online platforms.