FGC Discloses Unauthorized Access to Customer Personal Data in Brazil
Brazil's Fundo Garantidor de Créditos (FGC), a private deposit-insurance-like entity that protects depositors and investors when a bank fails, disclosed an unauthorized access incident affecting customer personal data. The breach was detected on October 26, 2026, and the entity reported the case to Brazil's data protection authority (ANPD) and notified all affected clients, though the total number impacted was not disclosed. Accessed data includes names, CPFs (Brazilian tax IDs), emails, dates of birth, tax withholding information related to guarantee payments, and investment origin/distribution channel details. FGC stated there is no evidence so far of data disclosure, misuse, or financial loss resulting from the incident.
Detalhes técnicos
Upon detecting the suspected intrusion, FGC restricted access to the affected environments, disabled unauthorized accounts, strengthened monitoring, and preserved evidence for forensic investigation. The entity is working with specialized security firms to determine the full extent of the access and whether data was copied, disclosed, or misused.
Remediação
FGC advised affected clients to be cautious of calls, messages, and emails from individuals claiming to represent the entity, warning that the exposed data could be used to make social engineering and scam attempts more convincing.
Linha do tempo
-
FGC Discloses Unauthorized Access to Customer Personal Data in Brazil
ler a análise desta fonte ocultar
Brazil's Fundo Garantidor de Créditos (FGC), a private deposit-insurance-like entity that protects depositors and investors when a bank fails, disclosed an unauthorized access incident affecting customer personal data. The breach was detected on October 26, 2026, and the entity reported the case to Brazil's data protection authority (ANPD) and notified all affected clients, though the total number impacted was not disclosed. Accessed data includes names, CPFs (Brazilian tax IDs), emails, dates of birth, tax withholding information related to guarantee payments, and investment origin/distribution channel details. FGC stated there is no evidence so far of data disclosure, misuse, or financial loss resulting from the incident.
Technical Details
Upon detecting the suspected intrusion, FGC restricted access to the affected environments, disabled unauthorized accounts, strengthened monitoring, and preserved evidence for forensic investigation. The entity is working with specialized security firms to determine the full extent of the access and whether data was copied, disclosed, or misused.
Remediation
FGC advised affected clients to be cautious of calls, messages, and emails from individuals claiming to represent the entity, warning that the exposed data could be used to make social engineering and scam attempts more convincing.