Horus Soluções Integradas, a technology provider managing municipal systems in Brazil, has allegedly been compromised, resulting in a significant leak of tax databases. The breach reportedly affects the company’s “ISS Web” system, which is utilized by various cities across the state of Minas Gerais. The leak was publicized on a dark web forum by a threat actor who claims to have exfiltrated approximately 1.97 million rows of data across 16 databases. While the breach targets the service provider, the downstream impact involves multiple municipal governments and their taxpayers.
According to the actor, the compromised SQL dump is approximately 456 MB in size and contains sensitive fiscal and personal information. The allegedly compromised data includes:
-
Taxpayer Records: Full names, addresses, and contact details.
-
Identification Documents: CPF and CNPJ numbers.
-
Fiscal Documents: NFSe (Electronic Service Invoices) and declarations.
-
Financial Activity: Payment guides and general financial logs.
-
System Data: Access logs and taxpayer IDs.
