STJ creates security systems after suspicion of information leak

The Superior Court of Justice (STJ) created two new security systems after the discovery of a suspected leak of Court information for lawyer Willer Tomaz, friend of Flávio Bolsonaro (PL). The measure was taken after Humberto Fontoura Pradera, former secretary of Information Technology of the STJ, was the subject of an arrest warrant on Tuesday (10), on suspicion of having facilitated Tomaz’s improper access to information from cases that are processed in the Court.

Before the arrest warrant on Tuesday, Pradera had already been searched and seized on October 19, in the first phase of Operation Linceu. The operation investigates the alleged leakage of confidential court data. The source did not detail the exact content of the documents accessed, but the gravity of the case prompted the Court to immediately review its security protocols.

Investigation points to Flávio Bolsonaro link

Willer Tomaz and the former candidate for the Presidency of the Republic Flávio Bolsonaro are being investigated in an investigation in Supremo Tribunal Federal (STF) on alleged money laundering. Tomaz is suspected of using inside information from STJ to benefit the friend in court proceedings. The investigation found on Willer’s cell phone a photo sent by Pradera of a document that was still in production on the STJ.

This document, not yet finalized, reveals that the leak occurred even before the information was officially published. The discovery ignited a warning in court, which began treating the case as a serious security breach. The source did not detail the content of the document, but the mere existence of the photo on Tomaz's cell phone was considered sufficient evidence for precautionary measures.

Enhanced security measures

In response to the incident, the court strengthened its security protocols, with changes to passwords and accesses, adoption of double authentication and new restrictions to prevent information leaks. Dual authentication requires the user to confirm their identity by two different methods, such as password and code sent to the mobile phone, making it difficult for unauthorized access.

In addition, the STJ determined as a standard the elaboration of an inventory of the accesses, with records that allow the tracking of the information. This inventory works like a digital ledger: each time someone accesses a document, it is recorded who accessed it, when and from which computer. This allows you to quickly identify any suspicious movements.

The mechanisms also include the identification of hidden texts and metadata, more robust authentication and monitoring of data use. Hidden texts are information that does not appear visually in the document, but may contain sensitive data. Metadata is information about the file, such as author, date of creation, and edit history. Monitoring these elements helps detect unauthorized manipulations or copies.

The “Auditable Trust” Model

Internally, the STJ considered the case serious and determined the adoption of new controls in the systems. The tools seek not only to increase security, but also to expand the ability to identify who accessed certain information and to track possible leaks. The model is internally called “auditable trust.”

This concept means that all actions in court systems can be audited later. Every access, change or download is recorded immutably, allowing an audit to reconstruct exactly what happened. This creates an environment of accountability: any server knows that its actions can be tracked, which inhibits improper behavior.

The implementation of these systems represents a cultural change in the information management of the STJ. In the past, the focus was on preventing external invasions. Now, the court is also concerned about internal threats, such as leaking by employees with legitimate access. The source did not detail the implementation schedule, but the measures are already in place.

Next steps of the investigation

The arrest of Pradera and the security measures are only part of STJ's response to the episode. The investigation is ongoing, both in the context of Operation Linceu and in the investigation of STF on Flávio Bolsonaro and Willer Tomaz. The source did not detail whether there will be any further arrests or whether other servers are under suspicion.

The case raises questions about data protection in the Brazilian courts. Courts across the country deal daily with sensitive information, and public trust depends on the integrity of these systems. The STJ, by adopting the “auditable trust” model, can serve as an example for other cuts.

For the average reader, the episode shows how judicial information can be misused to influence decisions or protect private interests. Transparency and security of the courts are essential to justice. The Boca no Trombone portal will continue to follow the developments of this case and other relevant news of national politics.

Read Also

Moro announces new Infrastructure and Security secretaries in Paraná

PEC for the creation of municipal police forces gains strength in Paraná after approval in Congress

TST president calls for immediate end of 6×1 scale

Font

g1.globo.com