started · updated
Smart Sampa surveillance system data breach in São Paulo
A security breach in São Paulo’s Smart Sampa surveillance system has exposed sensitive data and access to over 58,000 cameras for approximately 11 months. The exposure, revealed by a UOL report, included 181 authorized user logins and passwords, data on more than 6,000 security agents, and technical instructions that could allow the system to be replicated on external devices.
The breach allowed unauthorized access to real-time footage from cameras located in sensitive areas, including schools, daycare centers, hospitals, and health clinics. While the platform is used for facial recognition and monitoring criminal activity, the vulnerability permitted the viewing of faces and the searching of personal information such as names and CPFs.
São Paulo City Hall has attributed the incident to the illegal conduct of a single municipal employee, who has been removed from their duties and is under investigation by the Metropolitan Civil Guard Corregedoria. The administration denies any structural security weaknesses in the platform. Meanwhile, the Public Ministry of São Paulo has opened a procedure to investigate the incident, and several civil rights organizations have petitioned the National Data Protection Authority (ANPD) to investigate the city administration and the technology provider, Sentinelx.
Entities
Guarda Civil Metropolitana · National Data Protection Authority · Prefeitura de São Paulo · Ricardo Nunes · Sentinelx · Smart Sampa · São Paulo · São Paulo City Hall · UOL
Claims
What the coverage asserts, and how many sources carry each claim.
- [● 6 SOURCES] The exposed data included 181 logins and passwords of authorized users and data on over 6,000 security agents. valor.globo.com · jornal24horas.com.br · telesintese.com.br · www.brasil247.com
- [● 10 SOURCES] Sensitive data remained in a public internet repository for approximately one year. nucleo.jor.br · valor.globo.com · cbn.globo.com · jornal24horas.com.br · www.cartacapital.com.br · +3 more
- [● 2 SOURCES] A security flaw in the Smart Sampa system left the surveillance platform open to unauthorized access. nucleo.jor.br · valor.globo.com
- [● 10 SOURCES] The breach allowed unauthorized access to more than 58,000 cameras connected to the platform. nucleo.jor.br · cbn.globo.com · jornal24horas.com.br · www.cartacapital.com.br · www.techtudo.com.br · +3 more
- [● 6 SOURCES] The identified employee has been removed from their duties and is under investigation by the Metropolitan Civil Guard Corregedoria. saobentoemfoco.com.br · valor.globo.com · cbn.globo.com · www.cartacapital.com.br · telesintese.com.br
- [● 8 SOURCES] The São Paulo City Hall attributed the leak to the individual conduct of a credentialed employee. saobentoemfoco.com.br · valor.globo.com · cbn.globo.com · jornal24horas.com.br · www.cartacapital.com.br · +2 more
- [● 7 SOURCES] The municipal administration denies any structural weaknesses in the platform's security mechanisms. saobentoemfoco.com.br · valor.globo.com · cbn.globo.com · jornal24horas.com.br · www.cartacapital.com.br · +1 more