Caixa Vida e Previdência (CVP), part of the Caixa Seguridade group, says an unauthorized intrusion led to the copying of customer information from its systems, affecting its entire base of 7.6 million active clients.¹

The information accessed included names and Brazilian taxpayer identification numbers, or CPFs. For some customers, addresses, telephone numbers, email addresses and dates of birth were also exposed. That combination can increase the risk of phishing and impersonation attempts, even though the company says it has found no evidence that the information has been published or misused.²

CVP’s central message is that the breach did not reach the data that would directly enable account access or financial transactions. “There is no indication of compromise of sensitive data, such as financial, banking, password or authentication information,” the company said.² It also said the incident had been identified and contained, and that insurance assistance and normal operations were not disrupted.²

Its response has combined technical investigation with customer-protection measures. Caixa says it strengthened system security, brought in an outside digital-forensics consultancy and is monitoring the internet for any circulation of the data.¹ Customers whose mobile numbers or email addresses were exposed, along with people considered vulnerable, are being notified and given guidance aimed at reducing fraud risks.²

The company reported the event to Brazil’s data-protection authority, the ANPD, and other relevant authorities. The ANPD said it was following the steps taken, particularly measures involving transparency and mitigation of possible harm, and could request further explanations if needed.²

The incident comes amid wider attention to cyber resilience in major Brazilian infrastructure: a post shared by commentator Allan dos Santos highlighted a separate reported attack on systems at the Port of Santos.Allan Dos Santos (allanconta5)³