In recent months, the number of data leaks related to PIX keys has grown alarmingly. According to the Central Bank, in 2024, millions of personal data linked to PIX keys were exposed in security incidents. The leaked information includes data such as CPF, email and telephone numbers, valuable information for criminals looking to commit fraud or steal identities.
Security flaws in third-party systems that handle PIX are the main culprits behind mom database these leaks, which involve multiple financial institutions. The Central Bank, however, clarified that vulnerabilities in the PIX infrastructure itself did not cause the leaks, but rather the platforms connected to the system.
Central Bank confirms data leak of 8,000 BTG Pactual PIX keys
PIX security and Central Bank measures
In response to the increase in leaks, the Central Bank issued a series of recommendations and announced the implementation of additional measures to strengthen the security of the PIX system. These actions include intensified monitoring of financial institutions and payment service providers, as well as the requirement for greater rigor in compliance with cybersecurity protocols.
Additionally, the Central Bank reinforced the importance of educating users, advising them not to share their PIX keys in unsecured environments and to monitor suspicious transactions in their accounts. Despite the concerns, the Central Bank stated that Pix remains a safe and efficient solution for financial transactions in the country, but that increased security in institutions that use the system is essential to prevent new leaks.
The growth of PIX in Brazil and its risks
The PIX system, launched in 2020, quickly became one of the main payment methods in Brazil. In just a few years, millions of Brazilians adopted the technology due to its practicality and speed. According to recent data, more than 150 million PIX keys were registered by 2024, demonstrating the immense reach of the system.
However, with its increasing popularity comes increased risks. The massive use of PIX attracts the attention of cybercriminals, who see opportunities in third-party security breaches. The recent leaks are a clear example of this growing risk, especially considering the type of sensitive information that can be compromised.