Caixa Vida e Previdência (Caixa Seguridade) data breach

Caixa Vida e Previdência (Caixa Seguridade) announced a data breach on Nov 12, 2026 affecting about 7.6 million people, exposing national id numbers, addresses, phone numbers and email addresses. It was caused by a cyberattack. No settlement or compensation has been announced.

What happened

Caixa Seguridade, the insurance arm of Brazil's state bank Caixa Econômica Federal, told the market on November 12, 2026 that its subsidiary Caixa Vida e Previdência (CVP) identified a cyberattack on November 6 in which attackers copied the registration data of all its 7.6 million active customers, and some former customers, out of the company's systems. The copied data includes CPF taxpayer numbers, addresses, phone numbers, email addresses and dates of birth. The company says its preliminary review found no sign that financial or login data, such as policy values, pension balances, bank details or passwords, was compromised. CVP notified Brazil's data protection authority ANPD and the affected customers on November 11 and is investigating with an outside forensic firm.

What should I do?

1. Treat calls, texts, WhatsApp messages and emails that quote your CPF, address or Caixa policy details as suspect; contact Caixa only through its official app, website or branch.
2. Never share passwords, card details or verification codes with anyone who contacts you about your insurance or pension plan.
3. Check your CPF on the Registrato service of Brazil's Central Bank for loans or accounts you don't recognize.
4. Watch for fake offers of refunds, pension withdrawals or policy changes, a common follow-up scam after this kind of leak.

Check the other services you use →