THE SISVISA database leak exposed over 102,000 Brazilian health surveillance records, including sensitive information like IDs, tax numbers, and medical documents. Researcher Jeremiah Fowler discovered the publicly accessible database and notified ExpressVPN, which verified the findings. The data was unprotected, allowing anyone with the URL to access sensitive information, raising concerns about identity theft and fraud.
The database is critical for health regulation in Brazil, used for tracking compliance and issuing permits. Following the discovery, access was revoked, but the extent of data exposure and potential unauthorized access remains unclear.