Angelica Mari
for Brazil Tech
| October 6, 2021
| Topic: Data Management
Brazil’s national data protection authority (ANPD) is investigating the first leak of instant payment credentials under the custody and responsibility of the Bank of the State of Sergipe (Banese).
The incident, reported by the Central Bank on September 30, saw 395,009 phone numbers of non-account holders used as “keys” for transactions carried out through Pix, the country’s instant payments system.
According to the IT department at Banese, the details are likely to have been obtained through social engineering or phishing techniques.
In a statement, ANPD noted that it received a communication “from a financial institution about a security incident around the leakage of personal data of holders through the Instant Payments System (Pix)” on September 30.
Angelica Mari
for Brazil Tech
| October 6, 2021
| Topic: Data Management