DISCOVERING DIGITAL BREAKS: A COMPARATIVE STUDY OF DATA BREACHES AT VTECH, C&A AND SERASA EXPERIAN

um estudo comparativo das violações de dados na VTech, C&A e Serasa Experian

Authors

DOI:

https://doi.org/10.31510/infa.v21i2.2087

Keywords:

Cybersecurity, data breaches, SQL Injection, Phishing, encryption

Abstract

The article addresses the growing importance of cybersecurity in the current context, where digital devices are increasingly present in daily activities. Focused on three case studies – VTech, C&A and Serasa Experian – the work examines how security flaws allowed data breaches that compromised the sensitive information of millions of people. The methodology used is bibliographic, analyzing academic sources and safety reports. The article details attack techniques, such as SQL Injection, Phishing and Brute Force, in addition to proposing measures to mitigate such threats, such as encryption, multi-factor authentication and continuous employee training. It concludes that the combination of advanced technologies and educational practices is essential to reduce cyber attacks and improve companies' digital security, but points out limitations in data on companies' responses to breaches. Finally, it recommends future research to evaluate the effectiveness of the security measures adopted.

Downloads

Download data is not yet available.

References

APWG. Phishing Activity Trends Report. 2023. Disponível em: <https://www.apwg.org/trendsreports/>. Acesso em: 24 set. 2024.

BBC. Vtech breach: Passwords ‘not securely stored’. Disponível em: <https://www.bbc.com/news/technology-35101049>. Acesso em: 14 set. 2024.

BBC NEWS. Technology news. Disponível em: <https://www.bbc.com/news/technology-45446529>. Acesso em: 2 set. 2024.

BBC NEWS. Technology news. Disponível em: <https://www.bbc.co.uk/news/technology-54568784>. Acesso em: 2 set. 2024.

BRAZIL: Largest personal data leakage exposes 223 million people. Disponível em: <https://www.business-humanrights.org/en/latest-news/brazil-largest-personal-data-leakage-exposes-223-million-people-and-includes-facial-images-salary-credit-score-addresses-and-tax-identifiers/>. Acesso em: 3 set. 2024.

C&A GLOBAL. História da C&A. Disponível em: <https://www.c-and-a.com/uk/en/corporate/company/history> Acesso em: 19 set. 2024.

CSO ONLINE. Marriott data breach FAQ: How did it happen and what was the impact? Disponível em: <https://www.csoonline.com/article/567795/marriott-data-breach-faq-how-did-it-happen-and-what-was-the-impact.html>. Acesso em: 2 set. 2024.

FORBES. 5 ataques cibernéticos no Brasil em 2021 que geraram alerta. Disponível em: <https://forbes.com.br/forbes-tech/2021/12/5-ataques-ciberneticos-no-brasil-em-2021-que-geraram-alerta/>. Acesso em: 9 set. 2024.

FRANCESCHI-BICCHIERAI, Lorenzo. VTech hack exposes millions of users’ data. Vice, 02 dez. 2015. Disponível em: <https://www.vice.com/en/article/one-of-the-largest-hacks-yet-exposes-data-on-hundreds-of-thousands-of-kids/>. Acesso em: 11 set. 2024.

LEXOLOGY. Brazil´s biggest data leak to date: 220 million people affected. Disponível em: https://www.lexology.com/library/detail.aspx?g=f8cba4de-b585-4716-8684-9cb7cdf71024. Acesso em: 5 set. 2024.

NIST. Digital Identity Guidelines. 2023. Disponível em: <https://pages.nist.gov/800-63-3/sp800-63b.html>. Acesso em: 24 set. 2024.

OWASP. SQL Injection. 2023. Disponível em: <https://owasp.org/www-community/attacks/SQL_Injection>. Acesso em: 24 set. 2024.

RETAIL DIVE. C&A launches new e-commerce platform. Disponível em: <https://www.retaildive.com/news/ca-launches-new-e-commerce-platform/567890/>. Acesso em: 2 set. 2024.

SERASA EXPERIAN. Ano de 2021 bate recorde com mais de 4 milhões de tentativas de fraude. Disponível em: <https://www.serasaexperian.com.br/sala-de-imprensa/analise-de-dados/ano-de-2021-bate-recorde-com-mais-de-4-milhoes-de-tentativas-de-fraude-revela-serasa-experian/>. Acesso em: 5 set. 2024.

SERASA EXPERIAN. Ano de 2021 bate recorde com mais de 4 milhões de tentativas de fraude, revela Serasa Experian. Disponível em: <https://www.serasaexperian.com.br/sala-de-imprensa/analise-de-dados/ano-de-2021-bate-recorde-com-mais-de-4-milhoes-de-tentativas-de-fraude-revela-serasa-experian/>. Acesso em: 9 set. 2024.

SERASA EXPERIAN. Quem somos? Disponível em: <https://www.serasaexperian.com.br/sobre-nos/quem-somos/>. Acesso em: 3 set. 2024.

SOLMS, R.; NIEKERK, J. Information security management: Theory and practice. South African Journal of Information Management, v. 15, n. 1, p. 1-10, 2013.

STALINGS, W. Computer security: Principles and practice. 4. ed. Boston: Pearson, 2020.

VALENTE, Jonas. MPDFT abre inquérito para apurar vazamento de dados de clientes da C&A. Agência Brasil, Brasília, 03 set. 2018. Disponível em: <https://agenciabrasil.ebc.com.br/geral/noticia/2018-09/mpdft-abre-inquerito-para-apurar-vazamento-de-dados-de-clientes-da-ca>. Acesso em: 11 set. 2024.

VERIZON. Data breach investigations report. 2021. Disponível em: <https://enterprise.verizon.com/resources/reports/dbir/>. Acesso em: 15 set. 2024.

VTECH HOLDINGS LIMITED. Annual Report 2024. Disponível em: <https://www.vtech.com>. Acesso em: 14 set. 2024.

WELIVESECURITY. Serasa é notificada sobre vazamento de dados de 223 milhões de brasileiros. Disponível em: <https://www.welivesecurity.com/br/2021/01/29/serasa-e-notificada-sobre-vazamento-de-dados-de-223-milhoes-de-dados-de-brasileiros/>. Acesso em: 9 set. 2024.

Published

2025-09-17

Issue

Section

Tecnologia em Informática

How to Cite

HENRIQUE DE MATOS MACHADO SILVA, Gustavo; SCOMBATTI PINTO, Giuliano. DISCOVERING DIGITAL BREAKS: A COMPARATIVE STUDY OF DATA BREACHES AT VTECH, C&A AND SERASA EXPERIAN: um estudo comparativo das violações de dados na VTech, C&A e Serasa Experian. Revista Interface Tecnológica, Taquaritinga, SP, v. 21, n. 2, p. 182–191, 2025. DOI: 10.31510/infa.v21i2.2087. Disponível em: https://revista.fatectq.edu.br/interfacetecnologica/article/view/2087. Acesso em: 5 dec. 2025.