Thousands of IDs exposed in yet another data breach in Brazil

Group-IB discovered a publicly accessible US-hosted server containing a 27 GB ZIP archive with over 20,000 Brazilian national ID selfies, a custom web crawler linked to a Brazilian government portal, and tunneling tools; analysts believe the server was used as a staging area by a third party collecting sensitive personal data. The exposure posed significant privacy and fraud risks to affected individuals and operational, legal, and reputational risks to organizations; Brazil’s cybersecurity authorities took the server offline within ten hours after responsible disclosure by Group-IB.