Treasury plans to normalize offline systems by Monday

The National Treasury Secretariat reported that it plans to reestablish by Monday morning (16) the systems and services temporarily unavailable following the security incident reported on Thursday (12) night.

The interruption affects consultation tools and access to documents, historical series and information available on the agency's website and on the Transparent Treasury portal.

According to the Treasury, unavailability is part of the security, analysis and recovery measures adopted after unauthorized access. The agency emphasizes that not all systems temporarily offline were affected by the incident.

The main structures responsible for Treasury operations continue to function normally. The institution also states that there was no financial impact and that the management of the Federal Public Debt continues without changes.

Bond auctions

Although the interactive consultation of public bond auctions is temporarily unavailable on the Treasury website, the data can be accessed through other channels:

Database on the Central Bank Auction Results page;

Official ordinances;

Publication of auction results.

Exposed data

Identified on November 4, the security incident was only disclosed on Thursday night (12). As previously communicated by the agency, improper access affected two databases:

30 thousand registrations: names, CPFs and emails of users of the e-Serviços system;

Around 4 thousand Pix keys: information on federal government payment beneficiaries and data related to transactions.

The Treasury reported that unauthorized access was contained and that additional protective measures were adopted. A technical investigation was also launched to determine the origin and extent of the episode.

User guidance

The agency warns that the exposed data can be used to make fraud attempts more convincing. Therefore, it is recommended that you pay attention to suspicious messages and contacts that request personal information, passwords or payments.

The case was reported to the National Data Protection Authority (ANPD) and the Government Cyber ​​Incident Prevention, Treatment and Response Center (CTIR Gov).

Service channel

People with questions about the incident can contact the person responsible for processing personal data at the Ministry of Finance through the official Fala.BR channel.

The Treasury states that some services will remain unavailable until technical checks are completed and the identified vulnerabilities are corrected.