alt Hacker NewsI'm pretty sure at this point every tax ID (CPF) in Brazil is available on a database you can get on the dark web.
We've had a "CPF-ication" of everything in Brazil over the last few years. The vast majority of people have shared this number with their local grocery store, pharmacy, gym, etc. It's required for a lot of stuff and pretty necessary for others.
Given that, if that's all that leaked here that's a pretty good outcome. It's sad that I think like this but it's kind of how it is.
What makes me more pessimistic is that they claim no financial data was exposed but I wonder if that's really true. And that's where the gold is because then scammers know who to target.
Replies
Is this a Brazil law thing or businesses just using it as a readymade ID?
Even if no financial data was exposed, scammers now know these people have/had life insurance with Caixa, which is enough to make them preferred targets and to make scams more convincing.
Many restaurants and events require CPF to open a virtual tab with an RFC card and will refuse service if you refuse to give it