🚨🇧🇷 A threat actor known as shell is selling a dataset allegedly tied to the Central Bank of B...
Threat actor 'shell' sells dataset allegedly from Brazil's Central Bank.
A threat actor identified as 'shell' is reportedly selling a large dataset, approximately 17.1 GB, claimed to be exfiltrated from the Central Bank of Brazil. The data allegedly contains around 1.4 million records of legal entities, including CNPJ tax identification numbers.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Central Bank of Brazil?
Get an email when a new story names Central Bank of Brazil, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonA threat actor successfully exfiltrated 17.1 GB of sensitive data from Brazil's Central Bank, containing 1.4 million legal entity records including tax identification numbers. This breach demonstrates critical failures in protecting sensitive financial data and controlling access to high-value systems. The incident highlights how inadequate data protection measures at critical financial institutions can expose entire national economies to risk. Such breaches can enable large-scale financial fraud, identity theft, and undermine public trust in financial systems.
What helps against this
How we list vendors- Data loss prevention (DLP)
Sensitive data cannot quietly leave by email, upload, USB stick or AI tool.
- Encryption and key management
Stolen data stays unreadable, and the keys stay under your control.
- Incident response retainer
Experts are on call before the worst day, not searched for during it.