Brazil's deposit-insurance fund FGC discloses unauthorized access to guarantee-payout personal data
FGC (Fundo Garantidor de Créditos) guarantee-payout systems
Sponsored
Brought to you byTinkerer Club
The private club for people who own their servers, run their own AI, and pay $0/month for software.
Brazil's Fundo Garantidor de Créditos (FGC), the country's deposit-insurance and credit guarantor fund, says unauthorized parties accessed personal data in environments related to its internal guarantee-payout payment flows. The suspicion was identified on Oct 26 2026; FGC published a public update on Nov 5 2026. Affected personal data includes name, CPF, email and date of birth, plus guarantee-payment details: withheld tax information and the distribution channel of the guaranteed investment at the liquidated institution. FGC says it has found no evidence so far that the data were disclosed or misused, and no financial loss has been identified. It restricted access, blocked improper accounts, preserved evidence and is reviewing permissions and controls, with specialized firms supporting the ongoing investigation. ANPD (Brazil's data protection authority) and affected data holders have been notified.
Why this severity: CPF and other PII in guarantee-payout systems accessed; no confirmed misuse or financial loss yet; phishing risk elevated
- Started
- Oct 26, 2026
Affected
- Personal data in FGC environments related to internal guarantee-payout payment flows (name, CPF, email, date of birth; withheld tax info and distribution channel of the guaranteed investment)
Fixed in
- Nothing for the public to patch; FGC restricted access, blocked improper accounts, preserved evidence and is reviewing permissions and controls
Timeline3
FGC publishes a public comunicado: no evidence yet of disclosure or misuse and no financial loss identified; ANPD and affected holders notified; investigation continues with specialized firms. Affected data include name, CPF, email, date of birth and guarantee-payment tax/channel details.
Hacker News discusses the FGC disclosure covering PII and payout-related data.
FGC identifies suspicion of a security incident involving unauthorized access to personal data in environments related to its guarantee-payout payment flows and begins containment: access restrictions, blocking improper accounts, preserving evidence and reviewing permissions and controls.
Advisories1
News & write-ups3
Get an email when a new major security incident drops. No spam, unsubscribe any time.
