<?xml version="1.0" encoding="utf-8"?>
<feed xmlns="http://www.w3.org/2005/Atom">
  <title>Data breaches in Latin America and the Caribbean · Privacy Unpacked</title>
  <link href="https://privacyunpacked.com/breaches/region/latin-america/feed.xml" rel="self"/>
  <link href="https://privacyunpacked.com/breaches/region/latin-america/"/>
  <id>https://privacyunpacked.com/breaches/region/latin-america/feed.xml</id>
  <updated>2026-11-13T00:00:00Z</updated>
  <author><name>Privacy Unpacked</name></author>
  <entry>
    <title>Buró Laboral México data breach (Mexico)</title>
    <link href="https://privacyunpacked.com/breaches/company/buro-laboral-mexico/"/>
    <id>https://privacyunpacked.com/breaches/company/buro-laboral-mexico/#burolaboralmexico-2026-11-13</id>
    <updated>2026-11-13T00:00:00Z</updated>
    <summary>El Economista reported a data breach at Buró Laboral México (Mexico) on 13 November 2026. Exposed: Personal records.</summary>
  </entry>
  <entry>
    <title>Caixa Seguridade data breach (Brazil): 7,600,000 customers</title>
    <link href="https://privacyunpacked.com/breaches/company/caixa-seguridade/"/>
    <id>https://privacyunpacked.com/breaches/company/caixa-seguridade/#caixaseguridade-2026-11-12</id>
    <updated>2026-11-12T00:00:00Z</updated>
    <summary>Valor Econômico, Security.nl and Diário do Comércio reported a data breach at Caixa Seguridade (Brazil) on 12 November 2026, and it has been confirmed. It affected 7,600,000 customers. Exposed: Email addresses, Phone numbers, Dates of birth, Names, Addresses and CPF numbers and more.</summary>
  </entry>
  <entry>
    <title>Secretaria do Tesouro Nacional data breach (Brazil): 30,000 records</title>
    <link href="https://privacyunpacked.com/breaches/company/secretaria-do-tesouro-nacional/"/>
    <id>https://privacyunpacked.com/breaches/company/secretaria-do-tesouro-nacional/#secretariadotesouronacional-2026-11-12</id>
    <updated>2026-11-12T00:00:00Z</updated>
    <summary>O POVO, Tecnoblog and Extra reported a data breach at Secretaria do Tesouro Nacional (Brazil) on 12 November 2026, and it has been confirmed. It affected 30,000 records. Exposed: Pix keys, CPF numbers and Records.</summary>
  </entry>
  <entry>
    <title>Caixa Econômica Federal data breach (Brazil): 7,600,000 customers</title>
    <link href="https://privacyunpacked.com/breaches/company/caixa-economica-federal/"/>
    <id>https://privacyunpacked.com/breaches/company/caixa-economica-federal/#caixaeconomicafederal-2026-11-12</id>
    <updated>2026-11-12T00:00:00Z</updated>
    <summary>Tecnoblog and Notícias R7 reported a data breach at Caixa Econômica Federal (Brazil) on 12 November 2026. It affected 7,600,000 customers. Exposed: Phone numbers.</summary>
  </entry>
  <entry>
    <title>FGC data breach (Brazil)</title>
    <link href="https://privacyunpacked.com/breaches/company/fgc/"/>
    <id>https://privacyunpacked.com/breaches/company/fgc/#fgc-2026-11-05</id>
    <updated>2026-11-05T00:00:00Z</updated>
    <summary>Valor Econômico, Acessa.com and Sobral Online reported a data breach at FGC (Brazil) on 5 November 2026. Exposed: Investor data.</summary>
  </entry>
  <entry>
    <title>Convertr data breach (Brazil)</title>
    <link href="https://privacyunpacked.com/breaches/company/convertr/"/>
    <id>https://privacyunpacked.com/breaches/company/convertr/#convertr-2026-10-27</id>
    <updated>2026-10-27T00:00:00Z</updated>
    <summary>BleepingComputer reported a data breach at Convertr (Brazil) on 27 October 2026, and it has been confirmed. Exposed: Financial account and card details, Expiration date, CVV code, Cardholder name and CPF taxpayer identification number.</summary>
  </entry>
  <entry>
    <title>Prefeitura de Feira de Santana data breach (Brazil): 1,241 people</title>
    <link href="https://privacyunpacked.com/breaches/company/prefeitura-de-feira-de-santana/"/>
    <id>https://privacyunpacked.com/breaches/company/prefeitura-de-feira-de-santana/#prefeituradefeiradesantana-2026-10-26</id>
    <updated>2026-10-26T00:00:00Z</updated>
    <summary>GOV.BR reported a data breach at Prefeitura de Feira de Santana (Brazil) on 26 October 2026, and it has been confirmed. It affected 1,241 people. Exposed: Health and medical information and Names.</summary>
  </entry>
  <entry>
    <title>Smart Sampa data breach (Brazil)</title>
    <link href="https://privacyunpacked.com/breaches/company/smart-sampa/"/>
    <id>https://privacyunpacked.com/breaches/company/smart-sampa/#smartsampa-2026-10-20</id>
    <updated>2026-10-20T00:00:00Z</updated>
    <summary>O GLOBO, Notícias R7 and Correio da Manhã reported a data breach at Smart Sampa (Brazil) on 20 October 2026. Exposed: Passwords and logins, Surveillance data, Camera system data, Facial recognition images, Security agent information and Platform reproduction instructions and more.</summary>
  </entry>
  <entry>
    <title>HomeRefill data breach (Brazil): 187,457 accounts</title>
    <link href="https://privacyunpacked.com/breaches/company/homerefill/"/>
    <id>https://privacyunpacked.com/breaches/company/homerefill/#homerefill-2025-10-03</id>
    <updated>2025-10-03T00:00:00Z</updated>
    <summary>A breach of HomeRefill (Brazil) was added to Have I Been Pwned’s breach database on 3 October 2025. It affected 187,457 accounts. Exposed: Passwords and logins, Email addresses, Phone numbers, Dates of birth and Names. The breach began on 2 April 2020, 2,010 days before it was reported.</summary>
  </entry>
  <entry>
    <title>Speedio data breach (Brazil): 27,501,041 accounts</title>
    <link href="https://privacyunpacked.com/breaches/company/speedio/"/>
    <id>https://privacyunpacked.com/breaches/company/speedio/#speedio-2025-01-30</id>
    <updated>2025-01-30T00:00:00Z</updated>
    <summary>A breach of Speedio (Brazil) was added to Have I Been Pwned’s breach database on 30 January 2025. It affected 27,501,041 accounts. Exposed: Email addresses, Phone numbers, Addresses and Company names. The breach began on 24 December 2024, 37 days before it was reported.</summary>
  </entry>
  <entry>
    <title>Instituto Nacional de Deportes de Chile data breach (Chile): 319,613 accounts</title>
    <link href="https://privacyunpacked.com/breaches/company/instituto-nacional-de-deportes-de-chile/"/>
    <id>https://privacyunpacked.com/breaches/company/instituto-nacional-de-deportes-de-chile/#institutonacionaldedeportesdechile-2024-09-16</id>
    <updated>2024-09-16T00:00:00Z</updated>
    <summary>A breach of Instituto Nacional de Deportes de Chile (Chile) was added to Have I Been Pwned’s breach database on 16 September 2024. It affected 319,613 accounts. Exposed: Passwords and logins, Email addresses, Dates of birth, Names, Usernames and Genders. The breach began on 12 September 2024, 4 days before it was reported.</summary>
  </entry>
  <entry>
    <title>Misattributed Habib&#39;s Data data breach (Brazil): 3,517,679 accounts</title>
    <link href="https://privacyunpacked.com/breaches/company/misattributed-habib-s-data/"/>
    <id>https://privacyunpacked.com/breaches/company/misattributed-habib-s-data/#misattributedhabibsdata-2024-03-10</id>
    <updated>2024-03-10T00:00:00Z</updated>
    <summary>A breach of Misattributed Habib&#39;s Data (Brazil) was added to Have I Been Pwned’s breach database on 10 March 2024. It affected 3,517,679 accounts. Exposed: Email addresses, Phone numbers, Dates of birth, Names, IP addresses and Social media profiles. The breach began on 5 August 2021, 948 days before it was reported.</summary>
  </entry>
  <entry>
    <title>Estante Virtual data breach (Brazil): 5,412,603 accounts</title>
    <link href="https://privacyunpacked.com/breaches/company/estante-virtual/"/>
    <id>https://privacyunpacked.com/breaches/company/estante-virtual/#estantevirtual-2023-11-29</id>
    <updated>2023-11-29T00:00:00Z</updated>
    <summary>A breach of Estante Virtual (Brazil) was added to Have I Been Pwned’s breach database on 29 November 2023. It affected 5,412,603 accounts. Exposed: Passwords and logins, Email addresses, Phone numbers, Dates of birth, Names and Addresses and more. The breach began on 28 February 2019, 1,735 days before it was reported.</summary>
  </entry>
</feed>
