Tecnoblog and Notícias R7 reported a data breach at Caixa Econômica Federal (Brazil) on 12 November 2026. It affected 7,600,000 customers.
What we know as of
Status
Reported by Tecnoblog and Notícias R7; not yet confirmed by Caixa Econômica Federal or an authority.
People affected
7,600,000 customers.
What was exposed
Phone numbers.
When
First reported 12 November 2026.
Caixa Econômica Federal’s record
No earlier breach on record under this name.
Not known yet: when it began, how it happened and who was behind it. This page is updated as notices and statements come in.
Every fact above has its source below. Journalists: free to quote with credit (“Privacy Unpacked data breach tracker”, with a link to this page and the date); the figures can move. Follow this breach (feed) · Every major breach · Ask us for a figure
News reports are read by an AI model; every fact taken from an article was checked word for word against it, and anything it could not find was dropped. · Corrections and changes
Questions about the Caixa Econômica Federal breach
Was Caixa Econômica Federal hacked?
Tecnoblog and Notícias R7 reported a data breach at Caixa Econômica Federal (Brazil) on 12 November 2026. It affected 7,600,000 customers. The sources do not say how it happened. It has been reported but not confirmed by Caixa Econômica Federal or an authority.
What data was exposed in the Caixa Econômica Federal breach?
Phone numbers, by the notices and reports on this page.
How do I know if I was affected?
Organisations normally tell the people whose data was involved, by letter or email, and that notice says what of yours was in it. We cannot look up individual people. If you got a notice, check that it is real, then follow the steps on this page.
Is there a Caixa Econômica Federal data breach settlement?
No settlement open for claims is on record for Caixa Econômica Federal as of 15 November 2026. Every open settlement is listed with its deadline.
Is a letter, email or text about the Caixa Econômica Federal breach real or a scam?
A real notice names the breach, says what data was involved and never asks for a password, a code or a payment. Criminals often send fake notices after a breach is in the news. Do not use links or phone numbers in the message: go to Caixa Econômica Federal’s own site, or check the letter here.
Privacy Unpacked