InfoSecBulletin Cybersecurity for mankind
Attackers attempted to steal $130 million from Brazil’s real-time payment system on Friday by wielding valid credentials for an IT service provider. Unauthorized funds were transferred through a breach of the IT system of Sinqia, a Brazilian subsidiary of Evertec. Some of the funds have been recovered. Sinqia, based in Sao Paulo, serves 24 banks using the Brazilian Central Bank’s real-time payment platform, Pix.
Preliminary results from an ongoing digital forensic investigation into the attack “indicate that the unauthorized transactions were introduced into Sinqia’s Pix environment by exploiting legitimate Sinqia IT vendors’ credentials,” Evertec disclosed to investors.
Microsoft’s November 2026 Patch Tuesday addresses 1,093 flaws, with Outlook zero-day
Barracuda ESG flaws exploited, gaining root access
Apple, SAP, and Ivanti Patch Critical flaws Affecting Messaging, Bluetooth, and Enterprise Systems
Jailbroken DeepSeek AI Agent Conducts Two-Week Cyberattack on European Telecom
Daily Cyber security update for 10.11. 2026
IBM fixes 208 API Connect vulnerabilities, 47 critical
89 New ransomware groups emerge in 2026, claiming over 2,200 victims
Daily Cyber security update for 08.11. 2026
Japan banking crisis
Outage causes disruption at 128 japan banks: preventing ATM transaction
Daily Cyber security update for 06.11. 2026
Evertec, a leading financial technology and transaction processing provider in Latin America and the Caribbean, based in San Juan, Puerto Rico, acquired Sinqia in November 2023.
Sinqia said that it “halted transaction processing in its Pix environment and began working with outside cybersecurity forensics experts” after detecting hacking activity.
The Central Bank of Brazil introduced Pix in 2020, enabling mobile fund transfers. With 169 million registered users, it processed $6.4 billion in transactions in July. A recent Google survey shows that 94% of Brazilian adults use it, making it the most common payment method for two-thirds of the population of 211 million, slightly surpassing debit cards and cash.
The Brazilian Central Bank quickly disconnected the company’s IT platform from Pix to stop unauthorized transfers and freeze some stolen funds, totaling $64 million so far. They aim to recover more money, while law enforcement investigates the attack.
Sinqia reported that among the two dozen Brazilian financial firms using its platform for Pix, attackers managed to steal funds through “business-to-business financial transactions” from two companies. Local media named the victims as HSBC, which lost $70 million, and fintech Artta, which lost $7 million.
Sinqia’s connection to Pix remains offline, pending a full review by the central bank. The company said that it believes the incident solely affected its systems that connect to the Pix environment and said it’s seen no signs of further compromise, or exposure of personal data.
An HSBC spokeswoman told Information Security Media Group that it “identified financial transactions via Pix in an account with one of the bank’s providers” and that “no customer accounts or funds were impacted by the transaction, as they occurred exclusively within the provider’s system.” The bank said Sinqia took steps to block the rogue transactions in its own environment.*
Fintech Artta said in a statement it’s liaising with Sinqia and the BCB, and hopes to resume service as quickly as possible.
Evertec warned investors that “the financial and reputational impact of the incident, including any impact on the company’s internal controls, are not yet known and could be material,” and also that it has yet to determine “the scope of any liability associated with this matter, the applicability of any insurance coverage or what claims” that it may have against any culpable vendors or suppliers.
HexStrike AI Connects ChatGPT, Claude, Copilot with 150+ Security Tools
