Publications

Payment method that has won over Brazilians in recent years suffers from data leak

March 28, 2022

By: Leonardo Neri

The instant payment PIX gained bank customers almost automatically, as it is different from TED and DOC, which have costs to carry out their operations.

However, according to the Central Bank, PIX has registered a leak of information from the system at least 3 times in recent months, which totaled the undue exposure of 576,785 keys, with exposure of personal information, such as name, CPF, telephone number and the Banking Institution itself where the holder has an active account.

In a statement, the Central Bank claimed that the leak of this data did not involve confidential and/or sensitive information, as some of it would be present when transfers are made through other forms of digital business, in addition to being printed on checks and appearing on commercial receipts.

In any case, it is important to highlight the risks of fraudsters approaching those who have had their data leaked, using social engineering scams, given that the cybercriminal may pretend to be a bank employee, for example, and ask for card passwords or account details.

It is prudent for financial institutions that are victims of these leaks to notify potential consumers that their data has been exposed, as well as about preventive measures to be taken.

 

Source: https://www.cnnbrasil.com.br/business/meio-milhao-de-chaves-pix-ja-foi-alvo-de-vazamento-saiba-como-identificar-exposicao/

With the collaboration of Pedro Sobolewski

If you have any questions about the topics covered in this publication, please contact any of the lawyers listed below or your usual Mazzucco&Mello contact.

Leonardo Neri

+55 11 3090-7303

leonardo.neri@br-mm.com

This communication, which we believe may be of interest to our customers and friends of the company, is intended for general information only. It is not a complete analysis of the matters presented and should not be considered legal advice. In some jurisdictions, this may be considered lawyer advertising. Please see the company's privacy notice for more details.

Related Areas

Related Professionals