Incident detected on November 4th was only reported on November 12th; data can be used in scams
AI-generated summary
The National Treasury Secretariat identified unauthorized access to personal data in its technological environment, with exposure of information from approximately 30,000 registrations and around 4,000 Pix keys from beneficiaries of Federal Government payments. Detected on November 4, the incident was only reported by the agency this Thursday (12) evening.
The National Treasury Secretariat identified unauthorized access to personal data in its technological environment, with exposure of information from approximately 30,000 registrations and around 4,000 Pix keys from beneficiaries of Federal Government payments.
Detected on November 4, the incident was only reported by the agency this Thursday (12) evening.
According to the Treasury, names, CPF numbers and email addresses registered in the e-Serviços system, a portal used to request and monitor the institution's services, were improperly accessed.
There was also access to an internal analytical query base that contained recipient Pix keys and information related to payments made by the government.
Exposed data
According to the agency, the incident affected two different databases:
30 thousand registrations: names, CPFs and email addresses of users of the e-Serviços portal;
4 thousand Pix keys: information on beneficiaries of Federal Government payments, including recipient keys and data related to transactions.
The Treasury warned that the exposed information could be used by third parties to make fraud attempts more convincing, through messages and contacts that appear to be legitimate.
Therefore, it is recommended that citizens pay extra attention to suspicious communications that request personal data, passwords or payments.
Preserved systems
In a statement, the National Treasury Secretariat stated that the incident had no financial impact and did not compromise the organization's structural systems.
According to the institution, security mechanisms and network monitoring made it possible to identify and contain improper access. After identifying the problem, monitoring procedures were reinforced and additional protection measures were implemented.
The agency also initiated a technical investigation to determine the origin and extent of the incident.
Communication to ANPD
The Treasury reported that it reported the case to the National Data Protection Agency (ANPD) and the Government Cyber Incident Prevention, Treatment and Response Center (CTIR Gov).
The body also explained that public communication occurred after the period necessary to detect and confirm the incident, carry out internal investigations and implement containment and recovery measures, with the participation of different areas of the institution.
How to search for information
People who have questions about the incident can contact the person responsible for processing personal data at the Ministry of Finance through the official channel Fala.BR, the Federal Government's Ombudsman and Information Access platform.
Service is available at: https://falabr.cgu.gov.br.
AI outlook — possibilities, not facts
The ANPD may open an administrative process to investigate the incident and apply sanctions to the National Treasury.
Possible · Within weeks
The technical investigation initiated by Treasury is expected to produce a report on the origin and extent of the unauthorized access.
Likely · Within weeks
Microsoft's Outlook, Teams and Copilot suffered a severe global outage for more than 12 hours, affecting governments, companies and airlines in several countries. Microsoft attributed the problem to server failures and implemented fixes.

Microsoft services including Outlook, Teams and Microsoft 365 have suffered a global outage due to server overload. The company ruled out a cyber attack and is trying to restore the platforms.

A global outage in Microsoft services affects companies and governments in several countries, damaging tools such as Outlook, Teams and Microsoft 365, with no signs of a cyber attack.

The National Treasury confirmed a leak of data from e-Serviços users and an internal analytical base, exposing names, CPFs, emails and Pix keys of recipients of federal payments. The agency states that there was no financial impact and that the structuring systems were not affected.
Caixa Seguridade reported that a cyber attack on November 6 leaked data from 7.6 million active Caixa Vida e Previdência customers, including CPFs, addresses, telephone numbers, emails and dates of birth. The company notified the ANPD on November 11 and stated that there is no evidence of compromise of financial or authentication data.

Jensen Huang, CEO of Nvidia, is suspected of having a relationship with Alice Huang, who is being investigated by the US for possible espionage for China. The case involves national security and the company's business in the technological dispute between China and the United States. Huang has lost $32.9 billion in wealth since November 1, according to Forbes, dropping out of the top 10 richest people in the world.