And it was only breached because criminals approached an IT guy from the affected bank and offered him R$5000 to hand out the passwords used to login to their internal systems. Once the hackers were inside, they had control of bank accounts and started moving money around.

So no, it wasn't a breach to BCB, neither it was caused by system insecurity, but rather, human error in a downstream implementation.