Researcher says exposed SISVISA database contained 79GB of sensitive government records

A cybersecurity researcher has reported discovering a publicly accessible database believed to be associated with Brazil's SISVISA health surveillance platform.

According to the disclosure, the database reportedly contained more than 102,000 documents totaling approximately 79GB, including licensing applications, inspection reports, identification records, compliance documentation, and other files related to public health regulation.

The researcher says public access was restricted shortly after responsible disclosure. However, it's still unknown whether the database was operated directly by SISVISA or by a third-party contractor, how long it remained exposed, or whether unauthorized parties accessed the information before remediation.

Beyond the specific exposure, the report raises a broader question about public-sector digital transformation. As governments replace paper-based systems with online services, how do they ensure security keeps pace with modernization?

Join r/TechNadu for more discussions on government cybersecurity, cloud security, and major data exposure incidents.