Port of Santos Confirms Cyberattack, Says It Does Not Know Whether Data Was Accessed Without Authorization - Folha de S.Paulo

The APS, which manages Brazil's largest port, confirmed the cyberattack but has been unable to determine the extent of the incident or whether unauthorized data access occurred. Online systems have been partially unavailable since Friday (6), when a power outage coincided with the attack.

Companies operating at the port report delays in loading and unloading cargo, with route scheduling, arrival records and billing being handled manually. While the APS claims operations continue normally with no risk of shutdown, the disruption has impacted port efficiency.

Terminal Operations

BTP reported experiencing no problems, while Santos Brasil stated the attack was confined to the port authority. Abratec explained that terminals use systems independent of the APS's infrastructure, which may explain why some operations remain unaffected.

The terminal is operating normally and has not been affected.

Investigation Underway

The Federal Police has opened an investigation into the cyberattack. The APS prioritizes restoring systems before submitting a report to authorities. Cesportos-SP raised the complex's security level to 2 on a scale of up to 3, while the ANPD reviews the measures adopted by the APS.

On October 12, the group n0n posted ransom demands targeting 38 maritime transport companies on the dark web, mentioning the Port of Santos, though no official connection to the current attack has been confirmed. Trellix reports ransomware attacks increased by 67% between April and September 2026.