Skip to content
NewA calmer, faster ZeroHour

Brazil's Caixa insurer breach exposes names and tax IDs of all 7.6M customers

Hacker News · securityby dvaplima ()2 min read
AI summary · x-ai/grok-4.7Summaries by Vani AI

Caixa Vida e Previdência says unauthorized access on November 6 copied registration data, with no evidence financial data or passwords were taken.

Caixa Seguridade told shareholders that investee Caixa Vida e Previdência found unauthorized access and that customer registration data had been copied out of its environment. Confirmed exposed fields are names and CPF numbers across the registration database, covering all 7.6 million active customers and former customers; some records also held addresses, phones, emails, and dates of birth. Attack paths were blocked, an external forensic firm is investigating, and CVP notified Brazil’s data protection authority on November 11.

Unconfirmed: The finding that financial and authentication data were not compromised is a preliminary assessment; origin and full scope remain under investigation.

Key facts
  • CVP reported the incident to ANPD and other authorities on November 11, 2026.
  • Some records included addresses, phone numbers, emails, and dates of birth.
  • Preliminary review found no compromise of balances, banking data, or passwords.
  • Attack mechanisms were identified and blocked; an external forensic firm is investigating.
  • Customers with exposed phone numbers or emails are being notified about fraud risk.
Security assessment · AI, from the article

Impact: Names, tax IDs, and some contact details of 7.6 million customers

What to do
  1. 1.Treat unexpected contact using exposed CPF, phone, or email details as possible fraud.
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

From the original article

2 min read at filemanager-cdn.mziq.com

Caixa Seguridade Participações S. A. (“ Caixa Seguridade ” or the “ Company ”) hereby informs its shareholders and the market in general that, on November 11, 2026, its investee Caixa Vida e Previdência (" CVP ") reported a cybersecurity incident affecting

Hacker News · security

By dvaplima · filemanager-cdn.mziq.com

Read the full article at Hacker News · security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.