[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fvpXphJFIaty6bORpckgltepVp7aoVKTaPXEyV3zMjXo":3},{"article":4,"iocs":46,"watch_terms":47,"solutions":48,"lesson":135},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":23,"category":24,"article_tags":28},"bdfc3ec2-5e25-49ec-a331-d334f6598944","🚨🇧🇷 A threat actor known as shell is selling a dataset allegedly tied to the Central Bank of B...","a-threat-actor-known-as-shell-is-selling-a-dataset-allegedly-tied-to-the-central-dd4f93","🚨🇧🇷 A threat actor known as shell is selling a dataset allegedly tied to the Central Bank of Brazil (BACEN \u002F Banco Central do Brasil).\n\nThe actor claims around 17.1 GB of data is exposed across three tables, including roughly 1.4 million legal entity records (with CNPJ tax IDs, https:\u002F\u002Ft.co\u002F0wVMzClDSQ","A threat actor identified as 'shell' is reportedly selling a large dataset, approximately 17.1 GB, claimed to be exfiltrated from the Central Bank of Brazil. The data allegedly contains around 1.4 million records of legal entities, including CNPJ tax identification numbers.","Threat actor 'shell' sells dataset allegedly from Brazil's Central Bank.","https:\u002F\u002Fx.com\u002FDarkWebInformer\u002Fstatus\u002F2064013932654645252","https:\u002F\u002Fpbs.twimg.com\u002Fmedia\u002FHKTZt-IXMAAxtyB.jpg","2026-06-08T15:57:23+00:00","2026-06-08T16:00:14.05325+00:00",7,[17,20],{"name":18,"type":19},"shell","threat_actor",{"name":21,"type":22},"Central Bank of Brazil","vendor","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":23,"icon":25,"name":26,"slug":27},null,"Breaches","breaches",[29,31,36,41],{"category":30},{"id":23,"icon":25,"name":26,"slug":27},{"category":32},{"id":33,"icon":25,"name":34,"slug":35},"614132b8-5837-4952-b8b5-c6c9a32a1d85","Privacy","privacy",{"category":37},{"id":38,"icon":25,"name":39,"slug":40},"6cbdd207-aaa1-4176-9534-e156b125e917","Nation-state","nation-state",{"category":42},{"id":43,"icon":25,"name":44,"slug":45},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[21],{"controls":49,"vendors":134},[50,79,105],{"slug":51,"name":52,"problem":53,"products":54},"data-loss-prevention","Data loss prevention (DLP)","Sensitive data cannot quietly leave by email, upload, USB stick or AI tool.",[55,63,71],{"vendor_slug":56,"vendor_name":57,"vendor_logo":58,"product_slug":59,"product_name":60,"url":61,"description":62},"forcepoint","Forcepoint","\u002Fvendor-logos\u002Fforcepoint.png","forcepoint-dlp","Forcepoint DLP","https:\u002F\u002Fwww.forcepoint.com\u002Fproduct\u002Fdlp-data-loss-prevention","Data loss prevention for endpoints, network, email and cloud applications.",{"vendor_slug":64,"vendor_name":65,"vendor_logo":66,"product_slug":67,"product_name":68,"url":69,"description":70},"proofpoint","Proofpoint","\u002Fvendor-logos\u002Fproofpoint.png","enterprise-dlp","Proofpoint Enterprise DLP","https:\u002F\u002Fwww.proofpoint.com\u002Fus\u002Fproducts\u002Fdata-loss-prevention","Data loss prevention across email, cloud and endpoints.",{"vendor_slug":72,"vendor_name":73,"vendor_logo":74,"product_slug":75,"product_name":76,"url":77,"description":78},"netskope","Netskope","\u002Fvendor-logos\u002Fnetskope.png","netskope-dlp","Netskope DLP","https:\u002F\u002Fwww.netskope.com\u002Fproducts\u002Fdata-loss-prevention","Data loss prevention for web, cloud apps, AI tools and endpoints.",{"slug":80,"name":81,"problem":82,"products":83},"encryption-key-management","Encryption and key management","Stolen data stays unreadable, and the keys stay under your control.",[84,92,100],{"vendor_slug":85,"vendor_name":86,"vendor_logo":87,"product_slug":88,"product_name":89,"url":90,"description":91},"utimaco","Utimaco","\u002Fvendor-logos\u002Futimaco.png","utimaco-hsm","Utimaco General Purpose HSM","https:\u002F\u002Futimaco.com\u002Fdata-protection\u002Fgp-hsm","Hardware security modules for key generation, storage and cryptographic operations.",{"vendor_slug":93,"vendor_name":94,"vendor_logo":95,"product_slug":96,"product_name":97,"url":98,"description":99},"thales","Thales","\u002Fvendor-logos\u002Fthales.png","luna-hsm","Thales Luna HSM","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fhardware-security-modules","Hardware security modules for protecting cryptographic keys.",{"vendor_slug":93,"vendor_name":94,"vendor_logo":95,"product_slug":101,"product_name":102,"url":103,"description":104},"ciphertrust","CipherTrust Data Security Platform","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fdata-security-platform","Data discovery, encryption and central key management across on-premises and cloud.",{"slug":106,"name":107,"problem":108,"products":109},"incident-response-retainer","Incident response retainer","Experts are on call before the worst day, not searched for during it.",[110,118,126],{"vendor_slug":111,"vendor_name":112,"vendor_logo":113,"product_slug":114,"product_name":115,"url":116,"description":117},"google","Google","\u002Fvendor-logos\u002Fgoogle.png","mandiant-incident-response","Mandiant Incident Response","https:\u002F\u002Fcloud.google.com\u002Fsecurity\u002Fconsulting\u002Fmandiant-incident-response-services","Incident response services from Mandiant, available on retainer.",{"vendor_slug":119,"vendor_name":120,"vendor_logo":121,"product_slug":122,"product_name":123,"url":124,"description":125},"truesec","Truesec","\u002Fvendor-logos\u002Ftruesec.png","truesec-incident-response","Truesec Incident Response","https:\u002F\u002Fwww.truesec.com\u002Fservice\u002Fincident-response","Incident response team with a retainer option.",{"vendor_slug":127,"vendor_name":128,"vendor_logo":129,"product_slug":130,"product_name":131,"url":132,"description":133},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","unit-42-retainer","Unit 42 Retainer","https:\u002F\u002Fwww.paloaltonetworks.com\u002Funit42\u002Fretainer","Incident response retainer with Unit 42, including preparation services.",[],{"slug":136,"title":137,"body":138,"framework_refs":139,"framework_notes":146},"central-bank-data-breach-exposes-critical-infrastructure-vulnerabilities","Central Bank Data Breach Exposes Critical Infrastructure Vulnerabilities","A threat actor successfully exfiltrated 17.1 GB of sensitive data from Brazil's Central Bank, containing 1.4 million legal entity records including tax identification numbers. This breach demonstrates critical failures in protecting sensitive financial data and controlling access to high-value systems. The incident highlights how inadequate data protection measures at critical financial institutions can expose entire national economies to risk. Such breaches can enable large-scale financial fraud, identity theft, and undermine public trust in financial systems.",[140,141,142,143,144,145],"NIST SP 800-53 AC-2","CIS Control 3","CIS Control 6","ISO 27001 A.9.1","PCI DSS 7.1","GDPR Article 32",{}]