The Central Bank of Brazil (BC) warned that there was a leak of registration data relating to around 53 thousand Pix keys registered with the fintech Qesh.
On the other hand, the agency guaranteed that sensitive data, such as passwords, information on transactions or balances in transactional accounts, were not exposed.
Failure resulted in leak of Pix keys
According to the Central Bank, the leak occurred due to specific failures in the Qesh system. The data exposed included user name, CPF, relationship institution, branch and account number.
Read more: How to make money with cryptocurrencies
Additionally, the bank warned that it will not disclose the list of people whose data was leaked publicly. Instead, it will contact them through notifications on their bank apps or websites.
The BC made it clear that it will not contact you through means such as messaging apps, phone calls, SMS or email.
Finally, the BC stated that it will adopt “the necessary actions for the detailed investigation of the case and the sanctioning measures provided for in the current regulations will be applied”.
Beyond Qesh, leaks are on the rise
This is the 15th time that information related to Pix has been leaked, according to data from the Central Bank itself. The first case occurred in August 2021, when registration data for around 415,000 Pix keys linked to the Banco do Estado de Sergipe (Banese) were leaked.
On the other hand, the number of leaks is on the rise and 2024 has already surpassed all previous years combined. This was the 10th time that payment system data was compromised this year.
This represents a 1000% increase from 2023, when there was just one incident. Finally, there were two cases in 2022 and two more in 2021.
The increase in the number of leaks follows the growth in the popularity of Pix itself. A survey by Febraban, for example, found that the number of transactions using the payment system grew 61% in the first half of 2024 compared to the same period in 2023.
The article BC warns of the leak of more than 50 thousand Pix keys registered with Qesh was first seen on BeInCrypto Brasil.