ws.com.br

ws.com.br was compromised in a ransomware attack attributed to threeam in June 2026. The organization, operating in the Business Services sector in Brazil, was added to the group's data leak site as part of an extortion campaign.

threeam operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

WS Group Brasil is a Brazilian operations and business services provider engaged in logistics, technical support, contract administration, and labor-intensive service delivery. The company serves a mix of government, institutional, and commercial