[CLSTR]
< Back to situations

Monitor this situation.

[SITUATION] · [ACTIVE] · [TECHNOLOGY]

2 clusters · 19 sources · 3 days · First seen · Last updated

São Paulo Smart Sampa surveillance data breach

Overview

A security breach in São Paulo’s Smart Sampa surveillance system exposed sensitive data and access to over 58,000 cameras for approximately 11 months. The breach included 181 authorized user logins and passwords, data on more than 6,000 security agents, and technical instructions that could allow the system to be replicated on external devices. This vulnerability permitted unauthorized viewing of real-time footage from sensitive locations, such as schools, hospitals, and daycare centers, as well as the searching of personal information like names and CPFs.

São Paulo City Hall attributed the incident to the illegal conduct of a single municipal employee, who has been removed from duties and is under investigation. While the administration denies structural security weaknesses, the Public Ministry of São Paulo has opened an investigation.

In response to the leak, a coalition of ten organizations petitioned Brazil’s National Data Protection Authority (ANPD) to investigate the program. Additionally, a court has ordered an independent technical audit of the system to be conducted by the University of São Paulo’s Violence Studies Center (NEV). Civil society groups are also seeking to annul the program's contract and bidding process, citing privacy risks associated with its facial recognition technology.

Entities

National Data Protection Authority · Smart Sampa · Sentinelx · São Paulo · São Paulo City Hall

Timeline

  1. [TECHNOLOGY] 4 sources
    São Paulo Smart Sampa surveillance system faces investigation over data leak

    Human rights groups have called for an investigation into São Paulo’s Smart Sampa surveillance system after a massive data leak exposed credentials for 58,000 cameras, including those in hospitals and schools.

  2. [TECHNOLOGY] 15 sources
    Smart Sampa surveillance system data breach in São Paulo

    A data breach in São Paulo's Smart Sampa system exposed 181 logins and access to 58,000 cameras, including those in schools and hospitals, for nearly a year.

Sources

br.paipee.com · brasil247.com · cartacapital.com.br · cbn.globo.com · diariodocentrodomundo.com.br · fecomercio.com.br · hopkinsmedicine.org · jornal24horas.com.br · jornaldebrasilia.com.br · mixvale.com.br · mobile.valor.com.br · mobiletime.com.br · novaiguassuonline.com.br · nucleo.jor.br · onortao.com.br · revistaforum.com.br · saobentoemfoco.com.br · techtudo.com.br · telesintese.com.br