> On what grounds does Petrobras have any right to privacy from the USG?
Among other things, their confidentiality is protected by Brazilian law. If hackers break that law, Petrobras should be entitled to a remedy against them, just like Americans should be entitled to a remedy against Russian hackers, whether they intend to steal money or private information.
As far as I know, all governments harbor criminals in this sense, but I think they should be incentivized to do so much less, including by pointing out that the espionage is a crime and not glamorizing it (or being upset with governments for not doing it!).