A suspected cyberattack compromised banking terminals at Caixa Econômica Federal lottery outlets on 21 July 2026, affecting reported locations in São Paulo, Minas Gerais, Santa Catarina and Rio Grande do Sul. The systems processed bill payments without operators’ authorization, with transactions occurring seconds apart and individual amounts ranging from R$4,500 to R$5,000.
One outlet recorded approximately R$500,000 in irregular transactions, while another reported more than R$300,000. These figures represent disputed activity at individual businesses, not confirmed consolidated losses. Caixa, headed by Carlos Vieira, has not disclosed how many of its more than 13,000 lottery outlets were affected, the total amount involved, the access method or the identity of those responsible.
Carlos Vieira
Services began shutting down at approximately 3:30 p.m. An hour later, the payment system had been disconnected as a precaution. Several operators switched off their terminals and closed early to prevent further transactions.
Ricardo Amado Costa
Caixa acknowledged a “systemic incident” affecting SISPL but has not officially classified it as an organised cyberattack. Ricardo Amado Costa, president of the Brazilian Federation of Lottery Businesses, confirmed restrictions across multiple outlets, although his two businesses detected no abnormalities.
Core services were restored on 22 July, but deposits and payments of bills issued by other banks were capped at R$2,000 per transaction until 26 July. The restrictions covered operational code 012081 for deposits and 850100 for external-bank bills.
Dario Durigan
Operators were instructed to report discrepancies from 21 July through Conexão Parceiros, selecting “Operational–Transaction inconsistency”, while completing their accounting reconciliation normally. Caixa said customers and lottery businesses would not absorb losses but has not explained the reversal or compensation mechanism.
José Carlos Pereira de Paiva, president of São Paulo industry association Sincoesp, said only Caixa could provide a technical explanation. Renato Siqueira heads CAIXA Loterias, while federal lottery regulation rests with the Prizes and Betting Secretariat, led by Daniele Correa Cardoso, under Finance Minister Dario Durigan. As of 28 July, no personal-data breach or investigation by the Federal Police or data-protection authority had been confirmed.
