[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fzDwIxgQKHi_Q13fDMtDB--LfWmE-jMUWAbAnFH3rgDY":3},{"article":4,"iocs":44,"watch_terms":45,"solutions":46,"lesson":130},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":26,"category":27,"article_tags":31},"3bce5eb2-c797-4ba1-bbe3-9a1113426213","Brazil Health Surveillance Database Exposed 79GB of Sensitive Records","brazil-health-surveillance-database-exposed-79gb-of-sensitive-records-f9027a","Brazil's SISVISA health surveillance system left 102,215 files totaling 79GB open online, including tax IDs and identity documents, without password protection.","Brazil's SISVISA health surveillance system left over 102,000 files, totaling 79GB, publicly accessible online without password protection. The exposed data includes sensitive personal information such as names, addresses, phone numbers, tax IDs (CPF\u002FCNPJ), scanned driver's licenses, and doctor identity cards. While public access was reportedly shut off after discovery, it remains unknown how long the data was exposed or if it was accessed by malicious actors.","Brazil's SISVISA health database exposed 79GB of sensitive records online.","https:\u002F\u002Fhackread.com\u002Fbrazil-health-surveillance-database-exposed-records\u002F","https:\u002F\u002Fhackread.com\u002Fwp-content\u002Fuploads\u002F2026\u002F08\u002Fbrazil-health-surveillance-database-exposed-records.png","2026-08-05T10:21:27+00:00","2026-08-05T12:00:13.955104+00:00",7,[17,20,23],{"name":18,"type":19},"SISVISA","product",{"name":21,"type":22},"ExpressVPN","vendor",{"name":24,"type":25},"Jeremiah Fowler","threat_actor","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":26,"icon":28,"name":29,"slug":30},null,"Breaches","breaches",[32,34,39],{"category":33},{"id":26,"icon":28,"name":29,"slug":30},{"category":35},{"id":36,"icon":28,"name":37,"slug":38},"614132b8-5837-4952-b8b5-c6c9a32a1d85","Privacy","privacy",{"category":40},{"id":41,"icon":28,"name":42,"slug":43},"c5c77cdb-f7d7-4990-9436-c81dcbff1163","Policy","policy",[],[21,18],{"controls":47,"vendors":129},[48,77,103],{"slug":49,"name":50,"problem":51,"products":52},"cloud-security-posture","Cloud security posture management (CSPM and CNAPP)","Misconfigured cloud storage and over-permissive roles get caught before they leak.",[53,61,69],{"vendor_slug":54,"vendor_name":55,"vendor_logo":56,"product_slug":57,"product_name":58,"url":59,"description":60},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","defender-for-cloud","Microsoft Defender for Cloud","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fcloud-security\u002Fmicrosoft-defender-cloud","Cloud posture management and workload protection for Azure, AWS and Google Cloud.",{"vendor_slug":62,"vendor_name":63,"vendor_logo":64,"product_slug":65,"product_name":66,"url":67,"description":68},"wiz","Wiz","\u002Fvendor-logos\u002Fwiz.png","wiz-cloud","Wiz Cloud","https:\u002F\u002Fwww.wiz.io\u002Fplatform\u002Fwiz-cloud","Agentless cloud security posture and attack path analysis across major cloud providers.",{"vendor_slug":70,"vendor_name":71,"vendor_logo":72,"product_slug":73,"product_name":74,"url":75,"description":76},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-cloud-security","Falcon Cloud Security","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fcloud-security\u002F","Cloud posture management and workload protection.",{"slug":78,"name":79,"problem":80,"products":81},"data-loss-prevention","Data loss prevention (DLP)","Sensitive data cannot quietly leave by email, upload, USB stick or AI tool.",[82,90,98],{"vendor_slug":83,"vendor_name":84,"vendor_logo":85,"product_slug":86,"product_name":87,"url":88,"description":89},"proofpoint","Proofpoint","\u002Fvendor-logos\u002Fproofpoint.png","enterprise-dlp","Proofpoint Enterprise DLP","https:\u002F\u002Fwww.proofpoint.com\u002Fus\u002Fproducts\u002Fdata-loss-prevention","Data loss prevention across email, cloud and endpoints.",{"vendor_slug":91,"vendor_name":92,"vendor_logo":93,"product_slug":94,"product_name":95,"url":96,"description":97},"forcepoint","Forcepoint","\u002Fvendor-logos\u002Fforcepoint.png","forcepoint-dlp","Forcepoint DLP","https:\u002F\u002Fwww.forcepoint.com\u002Fproduct\u002Fdlp-data-loss-prevention","Data loss prevention for endpoints, network, email and cloud applications.",{"vendor_slug":54,"vendor_name":55,"vendor_logo":56,"product_slug":99,"product_name":100,"url":101,"description":102},"purview-dlp","Microsoft Purview Data Loss Prevention","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fdata-security-governance\u002Fmicrosoft-purview-data-security","Data classification and loss prevention across Microsoft 365, endpoints and connected cloud apps.",{"slug":104,"name":105,"problem":106,"products":107},"encryption-key-management","Encryption and key management","Stolen data stays unreadable, and the keys stay under your control.",[108,116,124],{"vendor_slug":109,"vendor_name":110,"vendor_logo":111,"product_slug":112,"product_name":113,"url":114,"description":115},"thales","Thales","\u002Fvendor-logos\u002Fthales.png","luna-hsm","Thales Luna HSM","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fhardware-security-modules","Hardware security modules for protecting cryptographic keys.",{"vendor_slug":117,"vendor_name":118,"vendor_logo":119,"product_slug":120,"product_name":121,"url":122,"description":123},"utimaco","Utimaco","\u002Fvendor-logos\u002Futimaco.png","utimaco-hsm","Utimaco General Purpose HSM","https:\u002F\u002Futimaco.com\u002Fdata-protection\u002Fgp-hsm","Hardware security modules for key generation, storage and cryptographic operations.",{"vendor_slug":109,"vendor_name":110,"vendor_logo":111,"product_slug":125,"product_name":126,"url":127,"description":128},"ciphertrust","CipherTrust Data Security Platform","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fdata-security-platform","Data discovery, encryption and central key management across on-premises and cloud.",[],{"slug":131,"title":132,"body":133,"framework_refs":134,"framework_notes":149},"brazil-sisvisa-health-database-left-79gb-of-sensitive-records-publicly-exposed","Brazil SISVISA Health Database Left 79GB of Sensitive Records Publicly Exposed","Brazil's SISVISA health surveillance system failed to implement even basic password protection on a publicly accessible database containing over 102,000 files and 79GB of sensitive personal and identity data. This represents a fundamental misconfiguration failure — no authentication barrier was placed between the public internet and highly sensitive government health records. The exposure of tax IDs, scanned identity documents, and personal contact information creates significant risks for identity theft and fraud affecting potentially thousands of individuals. The unknown duration of exposure compounds the risk, as there is no way to determine whether malicious actors harvested the data before access was revoked. This incident underscores that government health systems are high-value targets and must meet the same security standards expected of private sector data custodians.",[135,136,137,138,139,140,141,142,143,144,145,146,147,148],"CIS Control 3: Data Protection","CIS Control 4: Secure Configuration of Enterprise Assets","CIS Control 6: Access Control Management","CIS Control 13: Network Monitoring and Defense","NIST SP 800-53 AC-2: Account Management","NIST SP 800-53 AC-3: Access Enforcement","NIST SP 800-53 CM-6: Configuration Settings","NIST SP 800-53 IA-2: Identification and Authentication","NIST SP 800-53 SI-7: Software, Firmware, and Information Integrity","Brazil LGPD (Lei 13.709\u002F2018) Articles 46 & 48: Security and Breach Notification","GDPR Article 25: Data Protection by Design and by Default","GDPR Article 32: Security of Processing","ISO\u002FIEC 27001:2022 A.8.3: Information Access Restriction","ISO\u002FIEC 27001:2022 A.8.9: Configuration Management",{}]