National Treasury Confirms Data and Pix Key Breach

The National Treasury reported an unauthorized access incident within its technology systems. The event took place on November 4 and was disclosed by the institution this Thursday.

The breach compromised approximately 30,000 records from the e-Serviços portal. The exposed information includes full names, CPF numbers, and email addresses of users registered on the platform.

Furthermore, an internal database suffered an exposure of approximately 4,000 Pix keys belonging to individuals who receive payments from the federal government. Details regarding financial transactions were also improperly accessed.

The agency emphasized that there was no direct financial loss and that core operating systems remain intact. Security measures were reinforced following the identification of the flaw.

The Treasury warned that the data could be used for scams. The recommendation is for citizens to remain cautious regarding messages requesting passwords or sensitive information.

The case was reported to the National Data Protection Authority and the government's cyber incident response center. Technical investigations are ongoing to determine the origin of the access.