Brazil Treasury and Caixa Unit Confirm Major Personal-Data Breaches

Overview

• The Treasury said it detected an unauthorized access on Wednesday, Nov. 4 that exposed about 30,000 e‑Serviços cadastros and roughly 4,000 Pix keys used for government payments.
• Caixa Vida e Previdência identified a breach on Friday, Nov. 6 that resulted in the copy of personal and cadastral data covering its full active client base of 7.6 million and an undisclosed number of ex‑clients.
• Both institutions say they have found no evidence so far that financial account data or authentication credentials were taken and both have hired external forensic firms to determine origin and scope.
• Each organization reports it blocked the intrusion methods, notified the ANPD and other authorities, began notifying affected users whose contact details were exposed, and is monitoring for data publication or misuse.
• The incidents raise heightened fraud risk from phishing and social‑engineering that use names, CPFs and contact data, could prompt ANPD or CTIR Gov follow‑up under LGPD rules, and will be watched for any downstream misuse.