Higher School of the Public Ministry of the Union Listed by vicesociety Ransomware Group

On December 20, 2022, the Higher School of the Public Ministry of the Union (ESMPU) appeared on the leak site operated by the Vice Society ransomware group. The Brazilian institution, which provides professional training and development for members and servants of the Public Prosecutor’s Office, is claimed to have had internal files exfiltrated during a ransomware attack. The leak-site listing does not quantify how many individuals are affected and does not specify the exact data types beyond claiming that internal files were taken.

Details from the Leak-Site Listing

The Vice Society leak page states that ESMPU suffered a ransomware incident and that attackers successfully exfiltrated internal files. No sample data was published at the time of the initial listing, and the disclosure does not provide a count of records or names of specific systems compromised. The entry simply lists the organization’s full name and states the data was obtained through a ransomware attack. Public reporting on Vice Society indicates the group often uses their leak site to pressure victims into payment by threatening to release stolen material.

Why This Matters for You and Your Family

When a government-linked training academy that handles personnel records of prosecutors and support staff is breached, the ripple effects reach ordinary citizens. Employees, contractors, students, and their families may have personal information entangled in the internal files. If your name, address, government ID number, contact details, or employment history appears in training rosters, HR files, or enrollment databases connected to the Public Prosecutor’s Office, that information may now be in the hands of criminals. Internal files exfiltrated December 2022 can be used for identity theft, targeted phishing, or sold on underground markets long after the initial listing disappears.

The Doxxing and Identity-Chain Implications

Stolen internal files frequently contain spreadsheets that link names to email addresses, phone numbers, and sometimes family member details. Attackers can combine this information with data from previous breaches to build complete identity profiles. A single leaked work email can lead to personal accounts, social-media handles, and even children’s gaming usernames when the same password or recovery phone number is reused. These chains accelerate doxxing: once one account falls, attackers pivot to others, publishing addresses, photos, and relationships to increase pressure or enable further crimes. Credential leaks like this one cascade into account takeovers that affect not only the employee but everyone sharing the household network or family password habits.

Vice Society’s Known Track Record

Public reporting attributes Vice Society’s emergence to mid-2021. The group has targeted education, healthcare, and government-adjacent organizations across multiple countries. Notable prior victims include school districts and municipal agencies where student and employee data may have been exposed. Their typical playbook involves gaining initial access through phishing or unpatched remote desktop services, exfiltrating data before deploying ransomware, and then running a dual-extortion campaign: demanding payment to prevent file encryption and a second payment to avoid publication on their leak site. The group usually sets short deadlines and follows through on publishing samples when victims do not pay.

What to do

• Run a DoxxScan to map every link between your work email, government ID, phone number, and real-world identity so you can see exactly what chains exist from this claimed breach.
• Rotate any password used at the Higher School of the Public Ministry of the Union or related government training portals anywhere else it is reused, and switch to a hardware-backed authenticator app for 2FA.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure of your information is caught in hours rather than months.
• Cover the household with DoxxScan family coverage that extends to dependents and children’s gaming accounts, which often become the next link in doxxing chains when parent credentials are exposed.
• Let remediation specialists handle data-broker takedown requests and opt-out processes that arise from the personal details now circulating from the ESMPU files.

The Vice Society listing of the Higher School of the Public Ministry of the Union is a reminder that even institutions focused on professional standards can become gateways to personal exposure for thousands of families. Acting quickly on credential hygiene and identity mapping limits how far attackers can travel down the chains they are building. DoxxScan’s continuous monitoring, AI-powered identity-chain mapping, hands-on remediation by specialists, and household coverage including children’s gaming accounts give you a practical way to close those gaps before the next wave of abuse begins.