msgas.com.br

msgas.com.br was compromised in a ransomware attack attributed to blackwater in July 2026. The organization, operating in the Energy & Utilities sector in Brazil, was added to the group's data leak site as part of an extortion campaign.

blackwater operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

customers' personal data, contract information, internal company data: http://ucfhnoihzgx4wz4beyzfxnh46cs37r4zbq627xyctykpatruvmghbyqd.onion/s/7f89713825a4376e/