05.07.2025 00:00

Cybercriminals successfully executed a sophisticated heist, draining approximately $140 million (R$800 million) from six reserve accounts linked to Brazil's central bank. This audacious theft, uncovered by blockchain investigator ZachXBT and corroborated by Brazilian media sources, stemmed from a security breach affecting São Paulo-based software provider C&M Software on June 30th.


The breach exploited a compromised employee, João Nazareno Roque, who allegedly sold his corporate login credentials for a paltry R$15,000 ($2,770). Subsequent investigations suggest Roque's actions provided the hackers with the necessary access to infiltrate the central bank's systems. This highlights the vulnerability of even the most secure institutions to insider threats and the devastating potential of compromised credentials.


Brazilian law enforcement is currently investigating the incident, actively pursuing leads to apprehend the perpetrators and recover the stolen funds. The scale of the theft underscores the growing sophistication of cyberattacks targeting financial institutions globally, demanding a heightened focus on robust cybersecurity measures and employee training to mitigate future risks. The incident serves as a stark reminder of the financial and reputational damage caused by such breaches.