Massive Data Breach Exposes Personal Records of 223 Million Brazilians via Serasa Experian A threat actor has claimed to steal 1.8 TB of sensitive data from Serasa Experian, the Brazilian arm of global credit risk firm Experian, exposing records belonging to 223 million individuals a number exceeding Brazil’s entire population. The leaked dataset includes 5,000 detailed records containing CPF numbers (Brazil’s equivalent of Social Security numbers), full names, birth dates, emails, gender, phone numbers, and job titles. Researchers warn the breach may encompass data from both living and deceased individuals. The exposed information poses severe risks, as CPF numbers, occupations, and phone details could enable criminals to impersonate bank officials or government agents, facilitating fraud and financial theft. This incident follows a 2021 breach in Brazil that leaked salary data, facial images, addresses, credit scores, and contact details an event now tied to an ongoing lawsuit in the English High Court. Brazil joins Indonesia and China among nations hit by large-scale data exposures in recent years, underscoring the growing threat of cyberattacks targeting vast troves of personal and financial information.