mytower.com.br Listed by funksec Ransomware Group

On February 28, 2025, the Brazilian real estate technology company myTower.com.br appeared on the leak site of the funksec ransomware group. Public reporting indicates the attackers exfiltrated internal files during a ransomware incident. While the exact number of people affected remains unknown, anyone whose personal or financial records were stored in myTower’s systems could have data now circulating among criminals.

What's Publicly Reported from Reporting

Available reporting describes myTower as a provider of digital management tools for Brazilian property administrators and residents. The platform handles communication, financial records, and building automation data. The funksec group posted evidence of successful exfiltration on its leak site at funksec.top/mytower.com.br, listing the Brazilian firm among recent victims. No confirmed count of exposed records has been published, but the nature of the stolen material — internal files — suggests potential inclusion of resident names, contact details, payment information, and property records.

Why This Matters for You and Your Family

If you or your family live in a Brazilian residential building or condominium that uses myTower’s platform, your personal information may now sit in an attacker’s archive. Internal files often contain spreadsheets of residents, lease agreements, bank details for maintenance fees, and communication logs. Once such data leaves the company’s control, it can be sold, traded, or used to launch targeted scams against you. Criminals frequently combine it with other leaks to build convincing profiles for phishing, identity theft, or fraudulent loan applications in your name.

The Doxxing and Identity-Chain Risks

Leaked real estate records frequently link email addresses, phone numbers, and physical addresses. Attackers then cross-reference these details across social media, gaming platforms, and older breaches. A single exposed condominium record can reveal your child’s name, their school schedule, or even gaming usernames tied to the family Wi-Fi. This creates an identity chain that turns a simple data leak into long-term harassment or account takeovers. Credential leaks like this one regularly cascade into gaming account compromises because children often reuse passwords or security questions derived from family information.

Funksec Group Track Record

Public reporting attributes the funksec ransomware operation to a group that emerged in late 2023. The actors have claimed responsibility for attacks on various mid-sized companies across Latin America and Europe. Their typical playbook involves initial access through phishing or exploited remote desktop services, followed by exfiltration of sensitive files before deploying ransomware. They then pressure victims with deadlines to pay, threatening to publish stolen data on their leak site if demands are unmet. Exact success rates and prior victim counts are difficult to verify, but funksec maintains an active public leak portal that lists new targets every few weeks.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, with cleanup handled by the service.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure of your data is caught in hours rather than months.
• Rotate any password you used on mytower.com.br or related real estate portals anywhere it has been reused, and switch to 2FA through an authenticator app instead of SMS.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts, which often chain back to the same address or parent email.
• Let remediation specialists manage takedown requests across data brokers and exposed records on your behalf while you focus on securing accounts.

The incident underscores that even companies providing everyday services to your building can become gateways to personal exposure. One practical forward step is to treat every potential leak as the start of an identity chain rather than an isolated event. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts vulnerable to credential-based takeovers. Starting early gives you the best chance of limiting damage before criminals stitch your family’s details into larger attack campaigns.