A ransomware victim page has named 5deagosto.com.br, but the listing alone does not confirm breach, data theft, or operational disruption.
A public extortion post names a Brazilian domain and a group label, yet the technical record still does not confirm a breach, data theft, or even who is really behind the claim.