Tecnologística reports that Brazil's Santos Port Authority (APS) said it identified a cyberattack as systems restarted after a November 6 power outage, which compromised its files and took administrative systems offline; by November 12 it had recovered about 70% of affected files from backups, and ship movements and land access remain normal [2]. According to g1, the APS president believes malware was already lurking in its equipment and was triggered by the outage, possibly entering via an email an employee clicked; the Federal Police opened an investigation on November 10 and the state port security commission raised the port's protection level [1]. Tecnologística reports that port-operation paperwork can continue through the federal Porto Sem Papel system, which was not affected, so companies at the port can file through it [2].
Cyberattack knocks Brazil's Santos Port Authority admin systems offline for nearly a week; Federal Police investigate, port security level raised
1 min read
- Disclosed
- Nov 11, 2026
- Published
- Nov 13, 2026
- Last updated
- Nov 13, 2026
- CVSS basis
- Our assessment
- Attack vector
- Impact
- Actor type
- Motivation
On this page
30-second summary
What happened
Who is affected
Industries mainly affected: Transportation & logistics
What to do nowOur advice
Tecnologística reports that port-operation paperwork can continue through the federal Porto Sem Papel system, which was not affected, so companies at the port can file through it [2]
Timeline
Technical details
Remediation
Vendor guidance
- 1Use Porto Sem Papel for port paperwork mitigate[2]
Handle port-operation paperwork via the federal Porto Sem Papel system, which was not affected.
References
Media2
- [1]g12026-11-12Accessed 2026-11-12Snapshot 2026-11-13 sha256 08dae37fabe9
“A Autoridade Portuária de Santos (APS) acredita que um vírus já estava instalado nos equipamentos da companhia e foi acionado por uma queda de energia na sexta-feira (6), o que resultou no ataque hacker que deixou os sistemas administrativos indisponíveis.”
- [2]
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.