Brazil's Ministry of Health suffers a major ransomware attack, blocking access to millions of COVID-19 digital vaccination certificates and 50TB of data
Angelica Mari / ZDNet :
Context & Ripple Effects
This is the second headline-grabbing ransomware strike on a core Brazilian state institution in just over a year, following the Superior Court of Justice attack that suspended court sessions in November 2020. It lands on a ministry with a documented security record: a leaked credential had already exposed data on 243 million Brazilians for six months, and a hospital employee had uploaded a spreadsheet covering over 16 million COVID-19 patients, including President Bolsonaro, to GitHub weeks before that.
First-order effects
- Millions of COVID-19 digital vaccination certificates become inaccessible to holders and verifiers, and 50TB of ministry data is locked, directly disrupting vaccine-status checks during the pandemic.
- The Ministry of Health shifts into incident response, diverting staff and budget from vaccination-certificate operations to recovery and negotiation decisions.
Second-order effects
- Other Brazilian federal bodies face immediate pressure to audit their own backups and access controls, having watched two branches of government — the judiciary and now health — go dark within thirteen months.
- Vaccine verification falls back on physical cards and manual processes, adding friction for travel, employment checks, and any service that relied on the digital certificate.
Third-order effects
- A repeat pattern of ransomware against Brazilian public institutions points toward centralized mandates on offline backups, network segmentation, and incident disclosure across ministries rather than agency-by-agency improvisation.
- If critical-state systems remain this exposed, ransomware groups will keep treating Brazilian government databases as high-yield targets, forcing cybersecurity procurement to be treated as core infrastructure spending.
The trend: Ransomware is shifting from opportunistic corporate targets to national critical infrastructure, with Brazil's successive court and health-ministry attacks marking a state-level test case.