hn.today

Brazilian Credit Guarantor Fund Data Breach Affecting PII and Payout Data

fgc.org.br31 points7 comments
Screenshot of Brazilian Credit Guarantor Fund Data Breach Affecting PII and Payout Data

Brazil’s Credit Guarantee Fund (FGC) reports unauthorized access to personal information in systems connected with its internal guarantee-payment processes. The suspected incident was identified on October 26, 2026. Data involved includes individuals’ names, CPF identification numbers, email addresses and birth dates, as well as details about taxes withheld from guarantee payments and the distribution channel through which a covered investment was made at a liquidated institution. The FGC says it has found no evidence so far that the information was copied, disclosed or misused, and no financial losses have been identified. The investigation is continuing with help from specialists to establish the extent of access and whether any data was taken or exploited.

After discovering the incident, the FGC restricted access to affected systems, disabled unauthorized accounts, preserved evidence, strengthened monitoring and began reviewing permissions and security controls. It notified Brazil’s data protection authority and affected individuals, and says it will provide further updates as the investigation develops. Because the exposed details could make scams more convincing, people are urged to be wary of calls, emails or messages claiming to come from the FGC or other institutions - especially requests for money, passwords, authentication codes or app installations. Payment information should be checked through the FGC’s official channels or app; suspicious messages should be preserved, reported to authorities if fraud is attempted, and brought to the FGC’s attention.

Read on fgc.org.br7 comments on Hacker News

Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.

More in Security

The daily digest

Today's best Hacker News stories, summarized and screenshotted, one email a day.