The National Treasury Secretariat identified unauthorized access to personal data in its technological environment, with exposure of information from approximately 30,000 registrations and about 4,000 Pix keys of beneficiaries of Federal Government payments.
Detected on November 4, the incident was only communicated by the agency on Thursday evening (the 12th).
According to the Treasury, names, CPF numbers, and email addresses registered in the e-Serviços system were improperly accessed — a portal used to request and track services of the institution.
There was also access to an internal analytical query database containing Pix keys of recipients and information related to payments made by the government.
Exposed data
According to the agency, the incident affected two distinct databases:
30,000 registrations: names, CPFs, and email addresses of users of the e-Serviços portal;
4,000 Pix keys: information on beneficiaries of Federal Government payments, including recipients' keys and data related to the transactions.
The Treasury warned that the exposed information could be used by third parties to make fraud attempts more convincing, through messages and contacts that appear legitimate.
For this reason, the recommendation is that citizens redouble their attention when facing suspicious communications requesting personal data, passwords, or payments.
Systems preserved
In a statement, the National Treasury Secretariat said the incident caused no financial impact and did not compromise the agency's core systems.
According to the institution, security mechanisms and network monitoring made it possible to identify and contain the improper access. After the problem was identified, monitoring procedures were reinforced and additional protection measures were implemented.
The agency also began a technical investigation to determine the origin and extent of the incident.
Notification to the ANPD
The Treasury reported that it notified the National Data Protection Authority (ANPD) and the Government Cybersecurity Incident Prevention, Handling and Response Center (CTIR Gov).
The agency also explained that the public notification occurred after the period needed to detect and confirm the incident, carry out internal investigations, and implement containment and recovery measures, with the participation of different areas of the institution.
How to seek information
People with questions about the incident can contact the personal data processing officer at the Ministry of Finance through the official Fala.BR channel, the Federal Government's Ombudsman and Access to Information platform.
Assistance is available at: https://falabr.cgu.gov.br.