Banking information of 250,000 Brazilians leaked on criminal forum

Personal and banking data of nearly 250,000 Brazilians were exposed on a cybercrime forum, according to the security company’s identity. ZenoX AI. You The records allegedly come from seven institutions in the personal loan sector.

Posted on darkweb forum by user “bobetinho99”, the data is sold for just eight credits (eight euros) on the forum itself – credits on the website allow new downloads or viewing other leaks.

According to ZenoX AI, the data was “allegedly exposed due to possible integration flaws.” Among them you can find: ID, CPF, home addresses, credit card details, bank drafts, customer selfies etc.

The companies allegedly involved in the data leak will be: Sincronos, Éfeso Capital, CredCenter, GoldenBank, SemperPromotora, MegaPromotora and ProntoPay. THE TecMundo He tried to contact the companies involved but the complaint was made because the data was already public.

“Such data, once in the wrong hands, can be used to attempt fraud at various financial institutions, including possible credit requests, account opening, and other fraudulent actions on behalf of victims,” ZenoX AI comments.

Some of the available data is from 2024, but most of it consists of information from 2023 and before. To protect yourself against leaks, it’s important to follow some steps before and after a leak:

• Use second factor authentication (2FA) on all accounts through third-party apps (Google Authenticator, Microsoft Authenticator, Authy, etc.), no SMS
• Check financial transactions in the Central Bank Register
• Check for email and password leaks at Have I Be Pwned
• Avoid sending and using companies that are little known in the market or have a lot of complaints about data management on the internet.
• Avoid clicking on urgent messages via SMS, email and messaging apps