EN PT-BR
← Voltar ao feed
high financial_services insurance financial government

Caixa Vida e Previdência breach exposes personal data of 7.6 million clients, amid reported attacks on Petrobras and Tesouro

1 fonte(s) · 2 atualização(ões) · publicado 12/11/2026 15:00 · coletado há 1 hora

Matéria consolidada. Reúne 2 matérias que o Tifon tinha publicado separadamente sobre a mesma história. A IA reescreveu o relatório com o que a fonte trouxe em 13/11/2026 12:08; os links antigos trazem para cá.

Fontes: olhardigital.com.br ×2 ↗

Caixa Vida e Previdência, a unit of Caixa Seguridade, suffered a cyberattack that resulted in unauthorized access to and copying of personal data of about 7.6 million active clients (olhardigital.com.br). The exposed data includes names, CPFs, addresses, phone numbers, emails and birth dates (olhardigital.com.br). The company says it found no evidence that financial or authentication data was compromised, such as policy values, balances, bank details or passwords (olhardigital.com.br). The breach was detected on November 6, after which Caixa applied blocks and started forensic investigations with expert support (olhardigital.com.br). Brazil's ANPD is reviewing the company's response and transparency measures, and affected clients are receiving notifications and fraud prevention guidance (olhardigital.com.br). A later report (November 13) places this leak within a 24-hour wave of incidents that also reportedly hit Petrobras and the Tesouro, but gives no details on those attacks (olhardigital.com.br).

Detalhes técnicos

  • Impact: unauthorized access and copying of personal data (confidentiality breach) affecting about 7.6 million active clients (olhardigital.com.br).
  • Data types: names, CPFs, addresses, phone numbers, emails, birth dates (olhardigital.com.br).
  • Not reported as affected: policy values, balances, bank details, passwords (olhardigital.com.br).
  • The attack vector, exploited vulnerabilities, threat actor and any extortion or leak-site activity are not disclosed in the sources.
  • The exposed data profile is well suited to phishing and social engineering fraud using CPFs and contact details.

Remediação

  • Caixa implemented blocks, started forensic investigations with expert support and is notifying affected clients with fraud prevention guidance (olhardigital.com.br).
  • Clients should treat unsolicited contact referencing their policy or personal data with suspicion and follow the company's guidance.
  • Defenders should watch for phishing and impersonation campaigns that abuse Caixa branding and the exposed attributes.

Relatos divergentes

  • Relation to Pix instability: reports of instability in Caixa's Pix payment system on November 12 are not confirmed to be related to the breach (olhardigital.com.br, first report).
  • Scope: the later article (olhardigital.com.br, November 13) frames the leak as one of several attacks within 24 hours, including Petrobras and the Tesouro. It admits that details on those two are unspecified, so their nature, link to the Caixa breach and confirmation remain unverified.

Linha do tempo

  1. olhardigital.com.br ↗ · pub. 13/11/2026 11:00 · coletado 13/11 12:01

    Multiple Cybersecurity Incidents Impact Brazilian Institutions Including Caixa Seguridade, Petrobras, and Tesouro within 24 Hours

    ler a análise desta fonte

    Brazilian cybersecurity has come under intense scrutiny following a rapid succession of cyberattacks on major national institutions within a 24-hour period. The incidents include a significant data leak impacting 7.6 million customers of Caixa Vida e Previdência under Caixa Seguridade, while details regarding the attacks on Petrobras and the Tesouro remain unspecified in the article. These events raise urgent questions about the robustness of digital security measures protecting critical financial and governmental infrastructures in Brazil. Details about the nature of the Petrobras and Tesouro attacks, exploited vulnerabilities, or ongoing remediation efforts remain limited.

  2. olhardigital.com.br ↗ · pub. 12/11/2026 15:00 · coletado 12/11 17:01 primeiro registro

    Cyberattack on Caixa Vida e Previdência exposes personal data of 7.6 million clients including CPFs

    ler a análise desta fonte

    Caixa Vida e Previdência suffered a cyberattack resulting in unauthorized access and copying of personal data from approximately 7.6 million active clients. Exposed information includes names, CPFs, addresses, phone numbers, emails, and birth dates. The company confirmed no evidence of financial or authentication data compromise, such as policy values, balances, bank details, or passwords. Following detection on November 6, Caixa implemented blocks and initiated forensic investigations with expert support. Brazil's ANPD is reviewing their response and transparency measures, with affected clients receiving notifications and fraud prevention guidance. Coinciding reports of Caixa's Pix payment system instability on November 12 remain unconfirmed to be related to the breach.