Hackers breach fintech firm in attempted $130M bank heist

Hackers breached Evertec’s Brazilian subsidiary Sinqia S.A. in an attempt to steal $130 million from its Pix instant payments environment, after gaining unauthorized access to the system. According to the SEC filing, the breach was detected on 29 August 2025, when Sinqia halted transaction processing in Pix and engaged outside cybersecurity forensics experts.

The authorized transactions targeted two financial institutions that are customers of Sinqia, with local media implicating HSBC, though the bank said customer funds or data were not affected. Evertec notes that part of the $130 million has been recovered, though the amount recovered was not disclosed and recovery efforts are ongoing.

Investigators found the attackers gained access using stolen credentials from a vendor’s IT account, and there is no evidence yet that personal data was exposed or that the impact extended beyond Sinqia’s Pix environment. The Central Bank of Brazil revoked Sinqia’s Pix access while authorities expect a swift restoration as details and assurances are provided.