Brazil Bitcoin exchange says it is investigating alleged data leak affecting 657,000 customers, reported by hackers
In a statement, the exchange says it has already forwarded information to its IT team and says that if there was any problem, it will notify the authorities
On Saturday (10), the Brazil Bitcoin exchange was linked to a possible leak of its customers’ data, with a database containing the CPF numbers, names, and other information of 657,000 Brazilian investors. The bundle related to the still-unconfirmed incident suggests that customers’ transaction data was also leaked, and the criminal is demanding a ransom payment on a Dark Web forum.
“A cybercriminal on an underground forum claims to be selling 657,547 records allegedly obtained from Brasil Bitcoin (brasilbitcoin[.]com[.]br), a Brazilian cryptocurrency exchange, and says the data will be leaked if the company does not respond.#XRPLedgerPatchesXRPCreationBug
The listed fields include: Names, CPF numbers, email addresses, phone numbers, and ZIP codes; trading and transfer records (currency, amount, price, fees, order side, network, destination); addresses, wallet types, IP addresses, and user agents.
“The criminal claims the data was extracted in May 2026 through a corporate legal entity account belonging to Brasil Bitcoin,” says the Dark Web Intelligence profile, which has more than 200,000 followers on X.
What does the Brazil Bitcoin exchange say about the alleged data leak?#EtherETFsExtendOutflowsToNineDays
In a statement to Livecoins this Sunday (11), the Brazil Bitcoin exchange confirmed that it was aware of the post and said it was investigating the case with its technical team. It also made clear that if any data leak is confirmed, the national authorities will be notified as required by data protection legislation.#XRPLedgerPatchesXRPCreationBug
“Brasil Bitcoin announces that it became aware of a social media post about data attributed to users of its platform. The institution has engaged its information security team to verify the authenticity and scope of the material disclosed.#EvernorthCompletesSPACMergerWithArmadaII
The company clarifies that the data mentioned in the post does not include customers’ passwords or authentication credentials. There was no access to funds, the custody of customers’ assets was not affected, and the platform continues to operate normally, with no service interruptions.
Announcements involving alleged databases are common on underground forums and often involve large, high-profile companies. Their publication alone does not prove that the advertised material is authentic. Brasil Bitcoin has been increasing its investments in information security and cybersecurity, strengthening its threat monitoring and prevention mechanisms and its information protection measures.
If the content of the post is confirmed, the company will provide the relevant clarifications. Any required notifications to the National Data Protection Authority (ANPD) and affected individuals will be made in accordance with the criteria and deadlines established by current legislation.#EthereumSurpasses2500USDT
Brasil Bitcoin emphasizes the importance of using only its official customer support channels and being wary of messages or calls requesting passwords, authentication codes, or transfers under the pretext of protecting assets, even when they mention accurate information about the customer.“$BTC