The story
On 26 January 2026, Banco do Nordeste was the target of a cyberattack affecting its PIX instant payment infrastructure. According to reports, the intrusion occurred through a vulnerability identified by criminals in a third-party service provider connected to the bank's systems. The attack involved fraudulent transactions executed through a so-called "conta-bolsão" (pooled account) maintained by the service provider.
The bank stated in a filing with Brazil’s Securities and Exchange Commission (CVM) that no customer accounts were compromised and no data leak was identified. Following the incident, Banco do Nordeste temporarily suspended its PIX operations while technical teams worked in coordination with the Central Bank of Brazil to assess the scope of the breach and restore services securely.
From Wikipedia’s article on Banco do Nordeste, shared under CC BY-SA 4.0.4