17 hours ago
Translated to English: https://fgc-comunicado-en.netlify.app/
“What data was affected
- Personal data: name, CPF (Brazilian taxpayer ID), email address, and date of birth;
- Data related to the guarantee payment: information about the taxes withheld from the payment and about the distribution channel through which the guaranteed investment was made at the liquidated institution”
19 hours ago
Ouch this one is be bad... Millions of personal records in their control.
Payment data, social security numbers and so on. All oficial data, Fraudsters will have a field day with it.
16 hours ago
They already have all that and more: https://cyberbrics.info/the-largest-personal-data-leakage-in...
19 hours ago
Default assumption has to be that all PII is all exposed by now. How can It still be effective for fraud?
17 hours ago
Never underestimate Brazil. Just today I had to deal with a Brazilian government website which tried to authenticate me by birth date.
I've actually come to prefer their incompetence... Should they try to fix their broken assumptions, they will likely overcorrect and go off into the deep end and into full totalitarianism instead. Fraudulent calls got so bad nobody answers the phone anymore, so they just enacted a regulation requiring facial recognition to obtain or maintain a phone number. Now there's even more personal information being collected and stored. It's essentially a matter of time until they get breached and people's biometrics leak.
8 hours ago
> they will likely overcorrect and go off into the deep end and into full totalitarianism instead.
We are already wading neck deep, with id laws "for the children", the president vowing to get even with big tech by "regulating" them and the fact that our society is very immature when it comes to government control ("if you've got nothing to hide" isn't used ironically over here)
7 hours ago
It's terrible. GrapheneOS for example has already written about ECA Digital:
https://x.com/GrapheneOS/status/2037908987178283450
> Complying would require integrating a mandatory process for each user where a third party service checks government identification and confirms a match using the camera.
> It would require keeping data for auditing and providing a token for connecting age verification checks by apps and websites to the data.
It really made me miss the days the government didn't seem to know the internet existed.
And it's gonna get worse. Much worse.
> "if you've got nothing to hide" isn't used ironically over here
Quem não deve, não teme. Truly one of the most disgusting things about Brazilian society. A constant undercurrent of low intelligence brute force authoritarianism permeates the entire country and is seemingly inescapable. They will keep doubling down on it until all freedom is erradicated.
19 hours ago
[flagged]