The Brazilian government technology provider Serpro reports that its infrastructure has faced record distributed denial-of-service, or DDoS, attacks over the past six months, though officials insist the Gov.br identity platform remained operational, based on information published by Biometric Update.
Serpro director Andre Picoli Agatte recently described a November attack as unprecedented, highlighting the need for increased cybersecurity investment. While Serpro claims its defenses successfully mitigated the threats, various government services reported authentication instability during the same period. For instance, the Council for Financial Activities Control noted that certificate-based authentication was unavailable for some users between Nov. 4 and 5. Additionally, the eSocial service recorded integration issues. Neither agency explicitly linked these disruptions to the DDoS campaign. The Gov.br platform is critical to Brazil, supporting 179.5 million active accounts and providing access to over 5,000 federal services, including pensions and healthcare. Global trends show a significant rise in DDoS activity, with over 9 million attacks recorded worldwide in the first half of 2026. Experts note that attackers are increasingly targeting specific infrastructure components like firewalls and load balancers. Although Serpro signed a five-year, 38.4 million real contract for DDoS mitigation in May 2026, the company has not released technical data regarding the scale or impact of the recent incidents.
Source: Biometric Update
