hiway.com.br Listed by funksec Ransomware Group

On February 17, 2025, the Brazilian internet service provider hiway.com.br appeared on the leak site of the funksec ransomware group. The attackers claim to have exfiltrated internal files during a ransomware incident. While the exact number of customers affected remains unknown, anyone who has used hiway.com.br for internet, telephony, or data-center services could have personal or account information now at risk of exposure.

What's Publicly Reported from Reporting

Public reporting indicates that funksec listed hiway.com.br on its leak portal and posted samples of the stolen data. The compromised material consists of internal files exfiltrated in a ransomware attack. No confirmed total of impacted records has been released, and the precise date of initial compromise is not yet public. The company provides broadband, telephony, and data-center services primarily to customers in Brazil.

Why This Matters for You and Your Family

When an internet provider is breached, the data exposed often includes names, addresses, phone numbers, email accounts, and payment details tied to your household. Attackers can use this foundation to impersonate you with banks, government agencies, or utilities. For families, the breach can also expose information linked to children’s accounts or shared family logins. Once your details surface on criminal forums, the risk of identity theft, fraudulent accounts, and harassing calls increases quickly.

The Doxxing and Identity-Chain Implications

Credential leaks from service providers rarely stay isolated. A single exposed email or phone number can be correlated with gaming usernames, social-media handles, and school records. This creates an identity chain that lets attackers move from one account to the next. Credential leaks like this one cascade into account takeovers and doxxing chains, especially when gaming accounts belonging to children share the same email domain or recovery phone. Public reporting describes how such chains frequently lead to full doxxing packages sold on underground markets.

Funksec’s Publicly Known Track Record

Public reporting attributes funksec’s emergence to mid-2024. The group has listed multiple organizations across different sectors, typically following a double-extortion playbook: encrypt victim systems, exfiltrate data, then threaten to publish it unless a ransom is paid. Notable prior victims include other mid-sized service providers and companies with customer databases. Their standard approach involves initial access through phishing or unpatched remote-desktop services, followed by data exfiltration and publication on their leak site when negotiations fail.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, handles, and real-world identity so you can break the chains before criminals exploit them.
• Rotate any password you used at hiway.com.br and enable 2FA through an authenticator app on every account where that password was reused.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next leak exposing you or your family is caught in hours rather than months.
• Cover the household with DoxxScan family coverage that extends to dependents and children’s gaming accounts that often chain back to the same address or recovery details.
• Let remediation specialists handle takedown requests across data brokers and exposed profiles while you focus on securing your own accounts.

The incident underscores that even routine service providers can become gateways to larger identity compromises. Taking deliberate steps now limits how far attackers can travel along your personal data chain. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts. Start your DoxxScan trial today to gain clarity and control over what has already leaked and what may surface next.