Overview
The notice is dated October 29. The entry route in a multi-partner ecommerce environment remains under investigation and the count is unknown. Fraud using real customer data has involved fake gifts, shipping fees or PIX payments, but not every fraud report is conclusively attributed to this event.
Timeline
- Occurred
- Discovered
- Disclosed
Start of the disclosed access period.
End of the disclosed access period.
Customer notice published.
Organization response
The company undertook independent analysis, reviewed credentials/permissions, sought takedown of fraudulent sites, notified ANPD and warned against fees supposedly needed to release orders.
What you can do
Check notices through the organisation’s genuine contact channels. Do not enter credentials or payment details through links in unexpected messages.
Sources
- Comunicado sobre incidente de segurança com dados pessoaisSanta Lolla · 2026-11-09