The Central Bank reported the new leak reaching 53 thousand Pix keys; see details

Central Bank (BC) last Monday (30) Leak of registration data linked to more than 53,000 Pix keys belonging to Qesh Instituição de PayPal LTDA customers. It was stated that the security incident was caused by “specific malfunctions” in the company’s systems.

As in other such incidents, sensitive data such as passwords, account statements and other information covered by banking secrecy were not compromised. Exposed details do not allow migration of resources or access to customer accountsAccording to the monetary authority.

Username, CPF, affiliation, agency and account number are potentially exposed data In the leak affecting Fintech. They belong to a total of 53,383 Pix keys and may have been accessed during the period between September 9 and 19.

All people whose information was included in this Qesh leak will be informed through the application or the financial institution’s internet banking. BC stated that communication does not occur through other means such as SMS, phone call or e-mail, and asked users to be careful about the possibility of fraud.

The case is under review

Qesh explained in a statement that its anti-fraud system detects and blocks suspicious activity with Pix keys related to Detran, Income Tax and PASEP, among other agencies. To: Security tools blocked attackers, preventing unauthorized access to accounts and unauthorized withdrawals.

The incident is being investigated by BC. Possibility of applying sanctions prescribed by law depending on the sanctions determined. Fines and suspension of the instant pass system are some of the penalties that may occur in such incidents.

This is the 15th Pix key data leak since 2021 and one that will increase significantly in 2024. 10 incidents reported this year aloneThe largest of these, in March, compromised more than 87,000 keys saved by Sumup customers.