2026 Caixa Vida — cadastral copy; 7.6M names and CPFs
Data compromised
All 7.6 million active customers plus former customers in the cadastral base: names and CPF numbers. A subset also had address, phone, email and date of birth copied. Preliminary review found no policy values, pension balances, bank data or passwords. DPO mail comunicado.DPO@caixavidaeprevidencia.com.br. recordsAffected 7600000.
Technical writeup
Root cause
Caixa Seguridade market notice 12 November 2026: Caixa Vida e Previdência identified unauthorised access on 6 November and a copy of cadastral personal data leaving its environment. ANPD notified 11 November. Entry path unpublished. External digital-forensics firm retained. PIX outage at Caixa on 12 November is not tied to this incident.
References
- https://g1.globo.com/tecnologia/noticia/2026/11/12/caixa-ataque-dados-pix.ghtml
- https://www.estadao.com.br/tecmundo/ciberseguranca/caixa-vida-e-previdencia-sofre-ataque-hacker-e-dados-de-76-milhoes-sao-expostos/
- https://filemanager-cdn.mziq.com/published/3972906b-e50b-4f74-ab74-4d0d32125d11/9567a559-d20a-486e-a7ae-5c6bbc030c5e