Caixa Seguridade Confirms Data Breach Affecting 7.6 Million Customers
Subsidiary Caixa Vida e Previdência suffered a November cyberattack exposing tax IDs and personal contact information.
Caixa Seguridade informed the market about a cyberattack targeting its subsidiary, Caixa Vida e Previdência. The incident, detected on November 6, resulted in a data breach affecting 7.6 million current and former customers of the company.
The exposed information includes tax IDs (CPFs), addresses, phone numbers, email addresses, and dates of birth. The company stated there is no evidence that pension balances, policy values, passwords, or banking data were compromised.
Security measures were implemented after the mechanisms used by the attackers were blocked. The company launched a technical investigation with external forensic experts to assess the scope of the issue and monitor the exposure of information online.
The National Data Protection Authority and relevant authorities were notified in accordance with the General Data Protection Law. The company is currently contacting affected customers and providing guidance on how to prevent potential fraud attempts.
Caixa Seguridade CEO Gustavo Portela emphasized that the attack did not reach sensitive data or banking systems. Caixa's Vice President of Technology, Lucio Camilo, described the current landscape as an epidemic of cyberattacks that requires constant compliance.
Spotted an error? Write to suporte@criptoico.com.br.