← SISVISA (Brazil)

2026 SISVISA (Brazil) — exposed database; 102,215 health-surveillance records

2026 102.2K records affected Share on X

Data compromised

102,215 files/records tied to Brazil’s health-surveillance system including IDs, tax data, and regulatory/licence documents for hospitals, restaurants, and pharmacies

Technical writeup

Independent researcher-verified exposure — SecurityAffairs/Hackread August 2026. Jeremiah Fowler found an unauthenticated SISVISA (Brazil Health Surveillance Information System) database with exactly 102,215 files (~79 GB) containing regulatory and identity-related records. Not a ransomware claim; misconfigured/exposed storage. Agency confirmation of remediation not required for indexing. recordsAffected 102215; companyConfirmed false (no agency attestation cited).

Root cause

Publicly accessible database without authentication discovered by researcher Jeremiah Fowler (~79 GB)

References