A cyberattack hit Caixa Vida e Previdência, resulting in the exposure of personal data of current and former institution clients, including names and CPF numbers. Although the incident was detected on Friday, the 6th, it was only made public this Thursday, the 12th.
The company, which is a subsidiary of Caixa Seguridade, confirmed that there was unauthorized access to its systems and that copies of registration and personal information were taken outside its technological environment. The affected database contains records of 7.6 million active clients, although the official communication does not specify how many individuals actually had their information exposed.
In addition to names and CPFs, the compromised data may include addresses, phone numbers, emails, and dates of birth for a portion of the records. Caixa Seguridade assures that, so far, there are no signs that financial or authentication information has been breached, which includes policy values, pension balances, bank details, and passwords.
After identifying the undue access, the company took immediate measures, blocking the mechanisms used in the attack and implementing new layers of protection. A technical investigation was initiated with the help of specialized forensic auditing consultancy to determine the exact circumstances of the occurrence.
The National Data Protection Agency (ANPD) is currently monitoring the actions adopted by the institution, with a special focus on transparency and mitigating any potential harm to data subjects. The agency stated that it can request additional clarification from Caixa if it deems necessary.
Clients whose phones or emails were exposed, as well as groups classified as vulnerable, are being notified and receiving guidance to prevent fraud. Caixa has also provided an email channel to answer the questions of those affected.
On the same day the security incident was disclosed, users began reporting problems with Caixa's Pix service. According to Downdetector, which monitors complaints about digital services, failure reports emerged around 10 am this Thursday (12) and increased during the morning, exceeding a thousand notifications by 1 pm.
Reports included difficulties accessing the application, making transfers, and sending or receiving payments. Downdetector indicated that 55% of complaints referred to problems with the mobile application, 28% were related to transfers, and 14% to internet banking, which is access via browser.
As of now, there is no information establishing a direct link between the Pix instability and the cyberattack suffered by Caixa Vida e Previdência. The original article on this topic was initially published in Olhar Digital.
