A cybersecurity researcher has uncovered a publicly accessible database containing more than 102,000 sensitive records that appear to be linked to Brazil’s Health Surveillance Information System (SISVISA), potentially exposing personal information, government documents, and regulatory records.
Security researcher Jeremiah Fowler discovered an unprotected database containing 102,215 documents with a total size of around 79GB. According to Fowler, the database was neither password-protected nor encrypted. A limited review of the exposed files revealed a wide range of personally identifiable information (PII), including names, CPF and CNPJ identification numbers, phone numbers, addresses, licensing applications, inspection reports, complaints, and health-related compliance documents.
Based on the database name and the contents of the files, Fowler said the records appeared to be associated with Brazil’s Health Surveillance Information System (SISVISA), a government platform used by health authorities to manage sanitary inspections, business licensing, permits, and regulatory compliance for facilities such as hospitals, restaurants, and pharmacies. However, he noted that it is unclear whether the exposed database was managed directly by the government or by a third-party contractor.
The researcher said he immediately reported the exposure to multiple agencies through a responsible disclosure process. Public access to the database was reportedly restricted shortly afterward, although Fowler said he did not receive a response from the organizations he contacted.
Among the exposed documents were identity records, driver’s licenses, business inspection reports, and documents containing facial photographs and fingerprints. The database also included backup archives, uploaded documents, and imported files related to public health surveillance.
SISVISA was developed to modernize Brazil’s public health surveillance system by replacing slow paper-based processes with digital workflows. The platform was designed to improve administrative efficiency, reduce costs, support decision-making, and simplify licensing and inspection procedures.
If this article helped you, please consider supporting our work. Every small contribution keeps Abijita.com independent and running.
