Brazil Health Surveillance Database Exposed 79GB of Sensitive Records

Brazil's SISVISA health surveillance system failed to implement even basic password protection on a publicly accessible database containing over 102,000 files and 79GB of sensitive personal and identity data. This represents a fundamental misconfiguration failure — no authentication barrier was placed between the public internet and highly sensitive government health records. The exposure of tax IDs, scanned identity documents, and personal contact information creates significant risks for identity theft and fraud affecting potentially thousands of individuals. The unknown duration of exposure compounds the risk, as there is no way to determine whether malicious actors harvested the data before access was revoked. This incident underscores that government health systems are high-value targets and must meet the same security standards expected of private sector data custodians.