No financial information leaked, just tax id, which in Brazil nowadays doesn't mean much. There have been more than one high profile website in the past reportedly selling personal data, including tax identifier (CPF), for essentially any Brazilian citizen.
It is common to be asked for your CPF for trivial things like purchasing anything on a drugstore, and for any and all activity with government branches or banking. This combined with several breaches in government and private institutions in Brazil over the years has made this information essentially public.
More concerning is when more private information is leaked. For example, police security camera live feed and license plate or CPF-based tracking of anyone was sold online in the past, and have been used by criminal gangs in an attempted murder of a judge: https://www.poder360.com.br/justica/pcc-tinha-acesso-a-siste...
I'm pretty sure at this point every tax ID (CPF) in Brazil is available on a database you can get on the dark web.
We've had a "CPF-ication" of everything in Brazil over the last few years. The vast majority of people have shared this number with their local grocery store, pharmacy, gym, etc. It's required for a lot of stuff and pretty necessary for others.
Given that, if that's all that leaked here that's a pretty good outcome. It's sad that I think like this but it's kind of how it is.
What makes me more pessimistic is that they claim no financial data was exposed but I wonder if that's really true. And that's where the gold is because then scammers know who to target.
The attacks started hitting Brazil, and it'll be really bad! Multiple people that uses Caixa (in general) aren't tech savvy and could be caught by fraudsters more easily.
It is common to be asked for your CPF for trivial things like purchasing anything on a drugstore, and for any and all activity with government branches or banking. This combined with several breaches in government and private institutions in Brazil over the years has made this information essentially public.
More concerning is when more private information is leaked. For example, police security camera live feed and license plate or CPF-based tracking of anyone was sold online in the past, and have been used by criminal gangs in an attempted murder of a judge: https://www.poder360.com.br/justica/pcc-tinha-acesso-a-siste...
Paragraph 1: All CPFs have already leaked
P2: Even drugstores have your CPF
P3: The problem is if anything else leaks
Brazilian groupthink?
We've had a "CPF-ication" of everything in Brazil over the last few years. The vast majority of people have shared this number with their local grocery store, pharmacy, gym, etc. It's required for a lot of stuff and pretty necessary for others.
Given that, if that's all that leaked here that's a pretty good outcome. It's sad that I think like this but it's kind of how it is.
What makes me more pessimistic is that they claim no financial data was exposed but I wonder if that's really true. And that's where the gold is because then scammers know who to target.
How dystopian is it to find reassuring in this situation that a customer doesn't have to wonder whether their data was leaked because it's "all"?