Partido Liberal Data Breach: Whitearmor Ransomware Claim (Oct 2026)
Summary
In the latest cybersecurity news, Partido Liberal — an organization based in AR — has fallen victim to a ransomware attack conducted by the group Whitearmor. This data breach, discovered on 2026-10-25T16:56:33.851704+00:00, underscores the increasing need for proactive cybersecurity defenses as we continue through 2026.
Incident Report
| Attribute | Information |
|---|---|
| Target Organization | Partido Liberal |
| Threat Group | Whitearmor |
| Summary | Brazil’s Liberal Party (PL) is the political party of the Bolsonaro family. Although named “Liberal,” it is currently characterized by conservatism and right-wing populism. Jair Bolsonaro joined the party in 2021, and his son Flávio Bolsonaro is now the party’s presidential candidate, advocating reduced government intervention and tough security policies.
We hold the complete Partido Liberal (PL, Brazil) dump: 79K member records with CPF/voter ID/RG photos, 374 live cleartext e-Título credentials, 475 operator accounts with shared password, 2.7M audit events, party dossiers (artist payments, deepfakes, ghost donations), vendor PII, and 340K+ member images. If you don’t want this getting out, we suggest you contact us & pay the ransom amount of $5,000,000 in BTC 🙂 Contact: |
| Date of Breach | 2026-10-25T16:00:00+00:00 |
| Discovery Date | 2026-10-25T16:56:33.851704+00:00 |
| Region | AR |
| Business Sector | Government & Defense |
How to reduce your ransomware risk
Most ransomware intrusions start with a stolen password or a phishing email. A few proactive steps sharply cut your exposure:
- real-time breach alerts — close the gap attackers exploit.
- phishing simulations — close the gap attackers exploit.
Want to know if you’re already exposed? Run a free scan with the HookPhish data breach checker.
Disclaimer
HookPhish does not engage in the exfiltration, downloading, taking, hosting, viewing, reposting, or disclosure of any stolen information. All breach data reported here is sourced from publicly available threat intelligence feeds for awareness purposes only.
