In March 2018, researchers at InfoArmor discovered (PDF) an exposed database that contained extensive personal data for 120 million Brazilians. This comprised a unique identity number (the Cadastro de Pessoas FÌsicas, or CPF) that is issued by the Brazilian Federal Reserve to Brazilian citizens and tax-paying resident aliens.
To put this in perspective, the total population of Brazil last year stood at 210 million, with an electorate of just over 147 million. Because it took many weeks for the flaw to be fixed, InfoArmor warns “it is very likely sophisticated adversaries harvested this information.
Read more about this story on SecurityWeek.