XP sent an email to users On March 22, 2025, we became aware that a database hosted by an external XP service provider experienced unauthorized access. We immediately blocked this access. Your account and investments remain completely secure, as no XP systems were accessed. You may continue to use our apps and websites as usual, and there is no need to change your password.