FGC discloses unauthorized access to guarantee payout data in Brazil
The FGC in Brazil discloses unauthorized access to guarantee payout data; affected creditors should treat contacts citing their details with caution.
- Published
- Ecosystem
- Enterprise software
- Exploitation
- No, FGC reports unauthorized access but says it has found no evidence so far that the data was disclosed or misused
What happened
Brazil’s Fundo Garantidor de Creditos (FGC) says it identified unauthorized access to personal information in environments linked to the internal processes of its guarantee payment flow, according to a notice on its website updated on 5 November 2026 FGC. The FGC is the only source for this story. No independent outlet has verified the details.
According to the FGC, it identified the suspected incident on 26 October 2026. It says it has since restricted access to the affected environments, blocked improper accounts, preserved evidence, and started reviewing permissions and security controls FGC.
The FGC says it has found no evidence so far that the data was disclosed or misused, and no financial loss resulting from the event. It says an investigation with specialist firms is continuing to determine how far the access extended and whether information was copied, disclosed or misused FGC.
The FGC says it notified Brazil’s data protection authority (ANPD) and the affected data subjects FGC.
According to the FGC, the data involved includes:
- Personal data: name, CPF, email and date of birth.
- Guarantee payment data: information on taxes withheld from the payment, and the distribution channel through which the guaranteed investment was made at the liquidated institution.
The following details are not confirmed:
- How the attacker got in.
- How many people are affected.
- Who was behind the access.
- Whether any data was copied.
Am I affected?
- You may be affected if your data was processed in the FGC guarantee payment flow, for example as a creditor of a liquidated institution. The FGC says it has contacted affected data subjects directly FGC.
- The FGC warns that the exposed details could be used to make fraudulent contacts more convincing. Examples include identity misuse or attempts to obtain payments or further personal information, especially by people posing as FGC or other institutions FGC.
- Whether any specific individual’s data was affected is not confirmed beyond the FGC’s direct notifications.
What to do now
The FGC recommends these steps FGC:
- Distrust any contact that asks for payments, passwords, authentication codes or app installs, even if it quotes correct information about you.
- Do not click links in suspicious messages. Use the FGC app directly to check information about your payment process.
- Confirm anything related to the guarantee payment process only through official FGC channels.
- If you spot a fraud attempt, keep the suspicious messages, file a report with the competent authorities and tell the FGC immediately.
- For questions about your personal data, contact the FGC creditor service at atendimento.credores@fgc.org.br.
- Check the FGC notice page for updates, since the FGC says it will publish new findings there.