Brazil SISVISA database exposed without auth

Hackread reported that a database linked to Brazil’s SISVISA system may have been publicly accessible without authentication, and researcher Jeremiah Fowler identified it as belonging to the Brazilian Sanitary Surveillance Information System. The exposure may have covered 102,215 files, with an estimated 79 GB of data, including names, addresses, phone numbers, CPF/CNPJ numbers, identity documents, and health inspection reports.

What was the scope of the exposure?

Hackread’s coverage says the exposed database contained 102,215 files, with an estimated size of 79 GB. The data mentioned includes names, addresses, phone numbers, CPF/CNPJ numbers, identity documents, and health inspection reports. Security Affairs covered the same story and said the database was accessible without authentication, with 102,215 Brazilian health records.

What happened after the alerts?

According to the secondary coverage, public access was disabled after the researcher sent notices to government offices. No confirmed official response from Brazilian authorities appears in the available material.

Hackread’s report and Security Affairs’ follow-up agree that the exposure affected information tied to Brazil’s sanitary surveillance system and that unauthenticated access was central to the finding. Digital Reviews also published coverage of the SISVISA exposure, although the available results do not provide any additional official confirmation about the incident.