InfoSecBulletin Cybersecurity for mankind
Cybersecurity Researcher Jeremiah Fowler uncovered and reported to Express VPN a publicly exposed database that was neither password-protected nor encrypted. The database contained 102,215 documents totaling approximately 79GB.
Major Danish university breached, 200,000 users at risk
Microsoft’s X account hijacked to promote Clippy crypto scam
Critical cPanel, GitLab AI Gateway and Dell CSM Flaws Enable RCE And Admin Hijacking
Nearly 100,000 email addresses exposed in first AI-related data breach in Singapore
Hackers Exploit Zimbra Mail Servers: TeamViewer patched 5 critical flaws
Google Warns of Hackers Actively Exploiting Citrix 0-Day Flaws
CISA Warns Critical MikroTik RouterOS Flaw While Cisco SD-WAN Zero-Day Exploited in Attacks
Apple Zero-Day Exploited: Pentagon Data Breach Reportedly Exposes Sensitive Data of 3 Million People
JadePuffer Agentic AI targets and destroys Azure’s cloud resources
“InfoSecCon-2026: Bangladesh’s Cybersecurity Leaders Unite to Shape a Safer Digital Future”
Jeremiah Fowler said, I saw a lot of sensitive information. This includes personal information like names and CPF/CNPJ numbers, contact details, home addresses, applications for licenses and permits, and documents related to health and safety rules. There were also inspection reports, papers proving compliance, complaints, two compressed backup files, and other items linked to public health monitoring and regulation enforcement.
The researchers say the records seem to come from Brazil’s Health Surveillance Information System, called SISVISA. Even though the records looked linked to SISVISA, it is unclear if the database was owned and run by the organization or by another company.
This government platform helps health officials check sanitation. They inspect places like restaurants, hospitals, and pharmacies. It also helps with licenses and permits and monitors if health rules are followed.
After sending a warning to several agencies, public access was limited soon after and is not available now.
In a report from 2025, it was said that the SISVISA platform was created to fix problems in managing public health checks using technology. Public groups needed tools to make their work easier, cut costs, and work better. SISVISA was meant to help with running, managing, analyzing, and making decisions, improving the group’s ability to plan and connect tech with health goals.
Many government agencies worldwide switched to digital platforms years ago, but many are still changing to digital systems. This is why it is crucial to create apps and platforms with security as a priority. There are many risks when sharing documents and files that have PII and might not be meant for the public. These risks can be simple fraud, targeted phishing, or even identity theft.
