Ransomware Group: LOCKBIT3

VICTIM NAME: viacaojacarei[.]com[.]br

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the LOCKBIT3 Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak page associated with the victim, identified as “JACAREI TRANSPORTE URBANO LTDA,” was discovered on January 13, 2025. This company operates in the transportation and logistics sector in Brazil, specifically focusing on providing public passenger transport services. The information posted indicates that the leak was attributed to the LockBit 3 group, highlighting the growing trend of ransomware attacks targeting vital infrastructure services, such as transportation. The company’s website is viacaojacarei.com.br.

The page also includes a screenshot that likely showcases internal documents or sensitive information, although no specifics of the data contained were disclosed in the summary. Additionally, there were reports of an update related to the information posted on the same day. While no users, employees, or third-party details were mentioned, the brevity of the information suggests that the group may have opted to share only essential or non-detailed insights regarding this particular attack. The leak underscores the ongoing risks organizations face regarding data security, especially in critical service sectors.