Overview
- Civil police executed arrest and search warrants in Rio de Janeiro and Minas Gerais with support from state forces, and the operation remains active.
- Hackers accessed the National Database of Criminal Measures (BNMP) via VPNs and stolen logins, then changed search fields so active warrants would not appear.
- Authorities report no evidence that public servants participated, describing the affected professionals as victims of credential theft.
- The suspected ringleader previously worked at digital certificate firms, was arrested in September, and is accused of bypassing two-factor authentication and issuing fraudulent court orders.
- Financial tracking followed promotions posted on social media, identified a suspect’s girlfriend’s bank account moving illicit funds, and linked the group to contacts in Minas Gerais; the scheme also hid traffic fines and vehicle tax debts.