Cyber breach hits Brazil payment firm

By bne IntelliNews July 4, 2025

Brazil’s Central Bank has confirmed that C&M Software, which provides technology services for financial firms without their own connectivity networks, had been targeted in a cyberattack. The regulator ordered C&M to suspend access to its infrastructure for affected institutions, Reuters reported.

C&M Software’s commercial director, Kamal Zogheib, said the firm was the direct target of an attack involving fraudulent use of client credentials to try to breach its systems.

He said critical systems remained functional and that security measures had been enacted. The company is assisting the central bank and São Paulo state police with the investigation.

Financial firm BMP told Reuters that it and five other institutions faced unauthorised access to their Central Bank reserve accounts used for interbank settlements.

“No client accounts or internal balances were impacted,” BMP said, adding it has enough collateral to cover the affected sums.

An official with knowledge of the case said C&M works with about 20 smaller institutions and that the amounts involved do not run into the billions of reais. Another source said no client losses were reported.

The Central Bank has described such firms as providers for digital payment institutions, which have expanded rapidly alongside new services like the Pix instant payment system launched in 2020.

Related Articles

Brazil’s controversial oil tender proceeds with majors winning tracts

Some of the parcels disposed of were in the environmentally sensitive Foz do Amazonas Basin WHAT Critics slam Brazil as it auctions off 34 oil and gas exploration tracts WHY Brazil’s ... more

Brazil advances Bitcoin reserves legislation, stock exchange launches altcoin futures

Brazil continues positioning itself as a cryptocurrency leader through dual developments: advancing legislation for a Strategic Sovereign Bitcoin Reserve whilst its stock exchange introduces Ethereum ... more

Brazil’s Agibank taps $359mn from payroll-backed fund

Agibank has raised BRL2bn ($359mn) through its first Credit Rights Investment Fund (FIDC), backed by payroll-deductible loan receivables, Startupi ... more

Dismiss