FGC Notice — English Translation

English translation of the security-incident notice published by Brazil's Fundo Garantidor de Créditos (FGC, the Credit Guarantee Fund), last updated November 5, 2026. Original in Portuguese: fgc.org.br/comunicado. This is an unofficial translation.

Important notice

Updated November 5, 2026.

The FGC is reporting a security incident involving personal data processed by the organization, and is explaining what was identified, the steps taken, and the precautions we recommend.

We identified unauthorized access to personal information in environments related to the internal processes of the FGC's guarantee payment workflow. So far, no evidence has been found that the data was disclosed or misused. No financial loss resulting from the event has been identified either. The investigation continues, with the support of specialized firms, to determine the extent of the access and to verify whether the information was copied, disclosed, or misused.

The suspected incident was identified on October 26, 2026. Since then, access to the affected environments has been restricted, improper accounts have been blocked, evidence has been preserved, and permissions and security controls have been reviewed.

The National Data Protection Authority (ANPD) has been duly notified, in accordance with current law. The inquiry continues with expert support, and relevant additional information will be sent to the Authority as the investigation progresses. The affected data subjects have also been notified.

We have gathered here the information that is available and confirmed at this stage. If the inquiry uncovers new relevant facts about personal data or protective measures, we will update our guidance through official channels.

What data was affected

• Personal data: name, CPF (Brazilian taxpayer ID), email address, and date of birth;
• Data related to the guarantee payment: information about the taxes withheld from the payment and about the distribution channel through which the guaranteed investment was made at the liquidated institution.

Key precautions and how to protect yourself

The information involved could be used to make fraudulent contacts more convincing, including attempts at identity misuse or at obtaining payments and other personal information.

For this reason, we have contacted the affected data subjects, and we recommend extra caution with messages, calls, and emails that mention personal information or information related to the guarantee payment, especially when they come from people presenting themselves as representatives of the FGC or other institutions. Anyone who receives a suspicious contact can get in touch with the FGC.

We highlight some important precautions for everyone's safety:

• Be wary of contacts that ask for payments, passwords, authentication codes, or app installations, even when they mention correct information about you;
• Do not click links in suspicious messages. To access information about the payment process, use the FGC app directly;
• Confirm information related to the guarantee payment process through the FGC's official channels;
• Keep suspicious messages and file a report with the competent authorities if you identify a fraud attempt. In that case, notify the FGC immediately.

How the data is protected and what we are doing

Information security is a priority for the FGC, which has a robust protection architecture as well as specialized teams that monitor, detect, and respond to threats. The environments used authentication and access-control mechanisms. After identifying the incident, we restricted access to the affected environments, disabled improper accounts, strengthened monitoring, and preserved evidence for the investigation. The review of permissions and the validation of security controls are still under way.

The matter is being handled with the highest priority, with the main concern being support for the affected data subjects and the ongoing review of data-protection and information-security mechanisms.

Updates and guidance about the incident will be posted on this page: fgc.org.br/comunicado.

For more details about personal data or to resolve specific questions, contact our customer service center by email: atendimento.credores@fgc.org.br.

We remain available to provide clarification and to support you with preventive measures.

Sincerely,

Fundo Garantidor de Créditos – FGC
Data Protection Officer (DPO)
privacidade@fgc.org.br