Editora Irmãos Vitale

Editora Irmãos Vitale was compromised in a ransomware attack attributed to payload in June 2026. The organization, operating in the Education sector in Brazil, was added to the group's data leak site as part of an extortion campaign.

payload operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

Editora Irmãos Vitale is a traditional Brazilian music publisher specializing in music editions and printed music. They offer a range of products including musical works, archives, methods, songbooks, and e-books. Their services also encompass synchronization and licensing for artists and authors.