The personal information of over 243 million Brazilians was left accessible online for at least six months.
The data leak was discovered by the Brazilian newspaper Estadao and has been attributed to web developers leaving the password to a government database in the source code of a publicly accessible website.
The potentially exposed data included full names, addresses, telephone numbers, and medical details of anyone who had registered with the country’s national health system, totaling roughly 243 million records of living and deceased Brazilians. The country’s current population is estimated at 212 million.
This is the second major data leak discovered by Estadao in recent weeks; the newspaper found the medical and personal data of over 16 million Brazilian Covid-19 patients that had been leaked by a Sao Paolo hospital.
Read more here.