Find notable cyber news and cases, enriched with sources, timelines, and signals.

Sinqia S. . hit by cyberattack

Incident
First reported
Last updated
Happening score
H score 8
1 unique sources, 1 articles

Summary

Hide ▲

Sinqia S.A. disclosed a breach of its Pix environment that enabled attempted unauthorized transactions and forced a halt in payment processing. The event put a Brazilian instant-payments operation at risk, with part of the stolen funds recovered and no evidence of personal data exposure. The access path was tied to stolen credentials for an IT vendor account.

Timeline

  1. 03.09.2025 01:33 1 articles · 8mo ago

    Sinqia S.A. identifies unauthorized activity in its Pix environment

    Exploitation Observed

    On August 29, 2025, Sinqia S.A., the Brazilian subsidiary of Evertec, identified unauthorized activity in its Pix environment after attackers used stolen credentials for an IT vendor account. Sinqia halted transaction processing in Pix and began working with outside cybersecurity forensics experts.

    Show sources
  2. 03.09.2025 01:33 2 articles · 8mo ago

    Evertec discloses attempted $130 million unauthorized transactions from Sinqia S.A.

    Initial Disclosure

    On September 2, 2025, Evertec disclosed to the U.S. Securities and Exchange Commission (SEC) that hackers breached Sinqia S.A.'s systems on August 29 and attempted unauthorized transactions in the company's Pix environment. The disclosure said part of the $130 million had already been recovered, access to Pix had been revoked by the Central Bank of Brazil, and no evidence showed personal data exposure beyond Sinqia's Pix environment.

    Show sources