---
id: "CMP-202611-diwzjb"
page: "https://infrastack.ai/live/CMP-202611-diwzjb"
kind: "campaign"
aliases: []
title: "Brazil's deposit guarantee fund FGC breached: names, CPF, emails, birth dates and guarantee payout details of people paid by FGC exposed; expect scams posing as FGC"
severity: "medium"
cvss: null
epss: null
exploited: false
status: "open"
category: "other"
products: []
ecosystems: []
tags: ["campaign", "early-warning"]
not_affected_if: []
published_at: null
first_seen_at: "2026-11-05T23:57:40+00:00"
updated_at: "2026-11-05T23:58:12+00:00"
sources: [{"source": "analyst", "url": "https://www.fgc.org.br/comunicado", "first_seen_at": "2026-11-05T23:57:40+00:00", "cites": ["https://www.fgc.org.br/comunicado"]}]
exploit_sources: []
---

# Brazil's deposit guarantee fund FGC breached: names, CPF, emails, birth dates and guarantee payout details of people paid by FGC exposed; expect scams posing as FGC

Link for people: https://infrastack.ai/live/CMP-202611-diwzjb (this .md is for agents)

FGC (Fundo Garantidor de Créditos), the fund that pays out depositors and investors when a Brazilian bank or financial institution is liquidated, reports unauthorized access to personal data in systems used for its guarantee payment process. It spotted the suspected incident on 26 Oct 2026 and published a notice on 5 Nov 2026. Exposed: name, CPF, email and date of birth, plus payout details: taxes withheld on the guarantee payment and the distribution channel through which the guaranteed investment was made at the liquidated institution. FGC says it has no evidence yet that the data was leaked or misused and no financial loss. It blocked rogue accounts, told the ANPD and notified affected people. How the attackers got in, how many people are affected and who is behind it are unknown. FGC warns the data can make fraud calls, messages and emails posing as FGC or other institutions more convincing.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

Treat as suspect any call, SMS, WhatsApp message or email that claims to be from FGC (Fundo Garantidor de Créditos) or another institution, mentions your guarantee payment, CPF, birth date or the liquidated bank or broker, and asks for a payment, password, verification code or app install, even if the personal details are correct. FGC's official contacts are fgc.org.br (notice at fgc.org.br/comunicado), the FGC app, atendimento.credores@fgc.org.br, faleconosco@fgc.org.br, privacidade@fgc.org.br and 0800 400 5862. Specific scam sender domains, links or subject lines are not known yet.

## Fix

If you got a guarantee payout from FGC, expect targeted scams: do not pay fees, share codes or passwords, or install apps on request. Check anything about your payout only in the FGC app or through the official channels above, keep suspicious messages, file a police report and tell FGC. Watch for identity misuse of your CPF (for example with a credit bureau alert). Businesses in Brazilian finance should warn customers who were paid by FGC.

## Timeline

- 2026-11-05T23:57:40+00:00 analyst https://www.fgc.org.br/comunicado

## Documents

- [describes] Brazilian Credit Guarantor Fund Data Breach Affecting PII and Payout Data https://news.ycombinator.com/item?id=50386104
- [describes] FGC Comunicado: incidente de segurança envolvendo dados pessoais (Fundo Garantidor de Créditos) https://www.fgc.org.br/comunicado

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_