Central Bank warns of leak of over 8k Pix keys from BTG Pactual

This Thursday (15) more than 8 thousand Pix keys were leaked from Banco BTG Pactual. The security incident was announced by the Central Bank of Brazil (BC).

According to BC, User data was exposed between July 23 and August 5 this yearAccording to BTG, the information was “of a record nature” (number of accounts and number of institutions) — but they do not allow for banking transactions.

How fortunate that No information protected by bank secrecy was disclosedThis includes passwords, transaction records and balances. All account holders whose data has been leaked will be notified via the Banco BTG Pactual app or the institution’s official website.

Even the Central Bank, even BTG Pactual will not use direct communication channels with consumers. So, Suspicious of all contacts via phone calls, emails and SMS.

In the statement, BC emphasizes that the leak had a “low potential impact on users,” but announced the leak for transparency reasons.

In a note sent to the press, BTG Pactual explained that it identified certain queries using CPF numbers obtained outside the banking system. queries enabled visualization of agency data and current accounts linked to CPFs.

“BTG Pactual emphasizes that no attacks were made on the bank’s systems and that no sensitive data such as registration data, passwords and other confidential data were disclosed. BTG Pactual also stated that information security is a priority and that the institution will “resolve any doubts regarding its service channels”.

Another Pix key leak

The leak disclosed yesterday is the eighth in 2024 and the thirteenth since August 2021. The largest occurred in March, when 87,368 SumUp customer keys were leaked, with essentially the same type of data exposed in the last incident.

Last month, 99Pay was the one that suffered from the leaks that affected nearly 40 thousand keys. At that time, customer information, parts of CPFs and account numbers were exposed.