The leakage of PIX Chaves data in a system managed by the National Council of Justice (CNJ) affected 46,893,242 keys of 11,003,398 people, clarified on Thursday afternoon (24) the Central Bank (BC). The monetary authority also reported that more types of data were exposed than initially informed.
According to the BC and the CNJ, I improperly accessed data from Chaves Pix via the Judiciary’s Asset Search System (Sisbajud), which connects judges and the BC. The registration information exposed were as follows:
- user name;
- Registration of Individuals (CPF);
- Relationship institution;
- agency;
- Number and type of account;
- pix key;
- Pix key situation;
- PIX Key Creation Date;
- Date of exclusion of the pix key.
Initially, the CNJ had reported that the following information had been accessed: person name, pix key, bank name, branch number and account number.
According to the CNJ, the problem occurred on Sunday (20) and Monday (21) and was promptly corrected. The CNJ and BC have reiterated that sensitive data such as passwords, movements or financial balances in transactional accounts, or any other information under bank secrecy, were exposed.
>> Follow the channel of Brazil agency on WhatsApp
Sisbajud is an electronic tool that allows judges to ask for financial information and block debtor assets. The system replaces the old Bacenjud and facilitates communication between the judiciary and the financial system to comply with court orders.
Consultation channel
The CNJ said it will soon offer an exclusive tool for the citizen to consult if it was affected by the data exposure. The disclosure of this channel will take place on the CNJ website: www.cnj.jus.br
This will be the only means of communication to the affected people. The CNJ stressed that it will not contact the victims by messages, SMS, email or telephone calls.
Transparency
According to both agencies, the information obtained is of a registration nature, which does not allow movement of resources, nor access to accounts or other financial information.
Yesterday (23) at night, the BC had pointed out that the incident has low potential impact for users and that communication is not required by law. The municipality, however, decided to disclose the occurrence because of the principle of transparency.
