Experian investigating possible data breach in Brazil

Credit-checking firm Experian said on Monday that it is carrying out a forensic investigation following recent media reports of a data breach involving its Serasa business in Brazil, but that there is no evidence its technology systems have been compromised.

"Following recent media reports concerning data which is being illegally offered for sale on the internet, some of which may have been sourced from Serasa's non-sensitive marketing data, Experian is continuing to carry out a detailed forensic investigation," the company said, with further updates to be provided as appropriate.

Experian said that so far, it knows the data offered includes photographs, social security INSS, vehicle registrations and social media login details, which Serasa does not collect or hold.

There is no evidence that positive or negative credit data has been illegally obtained from Serasa, the company said, adding that despite "exhaustive investigations" to date, there is no evidence that its technology systems have been compromised.

"Protecting the security of data is our number one priority and is an obligation we take extremely seriously," Experian said.