Short answer
FGC, the fund that pays out guaranteed deposits and investments in Brazil, said unauthorized parties accessed personal data in internal environments used for its guarantee payment process. The suspected incident was identified on 26 October 2026. FGC reports no evidence of misuse and no financial loss.
If you think your details were included, start with our checklist on what to do after a data breach.
Key facts
| Organization | Fundo Garantidor de Créditos (FGC) |
|---|---|
| Incident type | Data breach |
| Status | Confirmed by the organization |
| Sector | Financial services (deposit guarantee fund) |
| Country | Brazil |
| Detected | 2026-10-26 |
| Disclosed | 2026-11-05 |
| People or records affected | People whose data was processed in FGC's guarantee payment process. FGC has not given a number |
What data was exposed
- Name, CPF taxpayer number, email address and date of birth
- Taxes withheld on the guarantee payment
- The distribution channel through which the guaranteed investment was made at the liquidated institution
What happened
The Fundo Garantidor de Créditos, known as FGC, is the Brazilian fund that pays guaranteed amounts to savers and investors when a financial institution is liquidated. On 5 November 2026 it published a notice about a security incident. It says unauthorized parties accessed personal information in internal environments used for its guarantee payment process. The suspected incident was identified on 26 October.
What data was involved
FGC lists name, CPF, email address and date of birth. It also lists information about the taxes withheld on the payment and the distribution channel through which the guaranteed investment was made at the liquidated institution. Jornal de Brasilia, which reported the notice on the same day, adds that the details could help scammers make fraudulent contacts sound convincing.
What FGC has done
FGC says it restricted access to the affected environments, disabled improper accounts, preserved evidence, strengthened monitoring and began reviewing permissions and security controls. It notified the ANPD and sent notices to the people concerned. Outside specialist firms are helping to determine whether information was copied, disclosed or misused. FGC has not named who was behind the access, and neither source gives a number of affected people.
Why the scam risk is real
People who receive a guarantee payment are waiting for money, which makes a well-timed message believable. A fraudster who knows your CPF and the bank that failed can sound like an insider. FGC’s own advice is blunt: do not trust a contact because it knows correct details about you, never hand over codes or passwords, and do not install apps at a stranger’s request.
What to do
Use only the official FGC app for payment status. Do not tap links in messages about a payout. If someone asks for a fee to release your money, that is a fraud sign. Our guide to recovery scams explains how fake “release your funds” offers work, and our data breach checklist covers the wider steps. Fake payment texts are common, see phishing messages.
Scams to watch for after this breach
Criminals use breach news as cover. Expect messages that mention the incident, quote real details, or offer help.
- Calls, texts or emails posing as FGC that mention your real CPF, birth date or payment details to seem genuine.
- Fake payment portals or apps that ask for a 'release fee', password or authentication code.
- Messages that push you to install an app or click a link to 'confirm' a guarantee payment.
What to do if you are affected
- 01Treat any contact about your FGC payment as suspect, even if the caller knows correct details about you.
- 02Never give a password or authentication code, make a payment or install an app at the request of someone who contacted you.
- 03Check payment information only through the official FGC app or the channels listed at fgc.org.br/comunicado.
- 04Keep suspicious messages, report fraud attempts to the authorities and tell FGC at atendimento.credores@fgc.org.br.
- 05Questions about your personal data can go to FGC's data protection officer at privacidade@fgc.org.br.
Frequently asked questions
Who is affected by the FGC incident?
People whose information was processed in FGC's guarantee payment process, meaning those compensated after a financial institution was liquidated. FGC says it notified them and has not given a count.
Was money taken?
FGC says there was no financial loss and no evidence so far that the data was disclosed or misused. Its investigation with specialist firms is still working out whether data was copied.
Has the data protection regulator been told?
Yes. FGC says it notified Brazil's national data protection authority, the ANPD, and will send more information as the investigation progresses.
How can I tell a real FGC message from a fake?
A caller knowing your CPF or payment details proves nothing. FGC says to confirm payment details only through its official app and channels, and never to share codes or install apps on request.
Sources
- Comunicado sobre incidente de segurança, Fundo Garantidor de Créditos (FGC), 2026-11-05
- FGC sofre ataque que da acesso a dados de investidores indenizados, Jornal de Brasilia, 2026-11-05
This post summarises public reporting as of 2026-11-06. Details of live incidents change; we update posts when the organization or regulators publish new facts. Spot an error? See our editorial and corrections policy.