FGC detects unauthorized access to customer data such as names, CPF numbers and emails
The fund that protects depositors says it has identified no financial loss and warns of scam attempts using the exposed information
Translated from the Portuguese original by the Panorama newsroom. Read in Portuguese
Summary written by the Panorama newsroom from the sources listed below. Facts are attributed to the original publications.
Brazil's Credit Guarantee Fund (FGC) said on Thursday (5) that it had identified unauthorized access to customers' personal data, according to g1. The exposed information includes names, CPF (Brazil's individual taxpayer ID) numbers, email addresses and dates of birth, as well as data on taxes withheld at payment and on the distribution channel through which the guaranteed investment was made at the liquidated institution.
The organization did not disclose how many people were affected but said all of them have been notified. In a statement, it said no financial loss was identified and that, so far, there are no signs that the data has been disclosed or misused. The investigation continues, with the help of specialized firms, to gauge the extent of the access and check whether the information was copied.
According to the FGC, the suspected intrusion was detected on October 26. Since then, the fund has restricted access to the affected environments, disabled improper accounts, stepped up monitoring and preserved evidence, in addition to starting a review of permissions and security controls. The case was reported to the National Data Protection Authority (ANPD).
The FGC advises customers to be wary of calls, messages and emails from people claiming to represent the organization, since the accessed data could be used to make scam attempts more convincing.
The fund is a private, nonprofit association that works as insurance to protect the money of depositors and investors when a bank runs into trouble, as happened in the case of Banco Master.