Sinqia

Hackers infiltrated Sinqia, a financial technology provider owned by Evertec, targeting its systems to execute unauthorized transfers via Pix, Brazil’s instant payment platform. The cybercriminals attempted to steal approximately 420 million reais ($77.4 million) from multiple Brazilian financial institutions, including HSBC’s local operations. While Sinqia confirmed the breach, it clarified that no suspicious activity was detected beyond the Pix system, suggesting the attack was contained before funds were successfully diverted. The incident highlights vulnerabilities in digital payment infrastructures and the growing sophistication of financially motivated cyberattacks in the banking sector. No evidence of broader system compromise or data exfiltration was reported, but the attempted theft underscores the high-stakes risks associated with real-time payment networks.

Source: https://dataconomy.com/2025/09/01/sinqia-pix-cyber-attack/

TPRM report: https://www.rankiteo.com/company/sinqia

"id": "sin837090225",
"linkid": "sinqia",
"type": "Cyber Attack",
"date": "9/2025",
"severity": "60",
"impact": "2",
"explanation": "Attack limited on finance or reputation"

{'affected_entities': [{'customers_affected': ['HSBC Holdings Plc (local '
                                               'operations)',
                                               'other unnamed Brazilian '
                                               'financial institutions'],
                        'industry': 'financial services (fintech)',
                        'location': 'Brazil',
                        'name': 'Sinqia',
                        'type': 'financial technology provider'},
                       {'industry': 'financial technology',
                        'name': 'Evertec',
                        'type': 'parent company'}],
 'description': 'Hackers infiltrated Sinqia, a financial technology provider '
                'owned by Evertec, and attempted to steal approximately 420 '
                'million reais ($77.4 million) from Brazilian financial '
                'institutions, including HSBC Holdings Plc’s local operations. '
                'The attack targeted Sinqia’s systems, specifically exploiting '
                'the Pix electronic payments system. Sinqia confirmed the '
                'breach but stated no suspicious activity was detected in '
                'systems other than Pix.',
 'impact': {'financial_loss': {'actual': None,
                               'attempted': '420 million reais (~$77.4 '
                                            'million)'},
            'payment_information_risk': 'high (attempted unauthorized '
                                        'transfers)',
            'systems_affected': ['Pix electronic payments system']},
 'initial_access_broker': {'high_value_targets': ['Pix electronic payments '
                                                  'system']},
 'investigation_status': 'ongoing (no evidence of suspicious activity outside '
                         'Pix confirmed by Sinqia)',
 'motivation': 'financial gain',
 'references': [{'source': 'O Globo'}],
 'response': {'communication_strategy': {'details': 'Sinqia confirmed the '
                                                    'attack and clarified that '
                                                    'only the Pix system was '
                                                    'affected.',
                                         'public_statement': True},
              'incident_response_plan_activated': True},
 'title': 'Cyberattack on Sinqia Attempts to Steal $77.4 Million via Pix '
          'Transfers',
 'type': ['cyberattack',
          'unauthorized fund transfer attempt',
          'financial fraud']}