Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

FIESP Data Breach: 34 Million Brazilian Records Exposed in an Unsecured Elasticsearch Database

hackenproof.com | incident | #misconfiguration | #data-breach | #elasticsearch | #brazil | #personal-data | #exposed-database | #lgpd

Summary

An unsecured Elasticsearch instance discovered via Binaryedge exposed 34.8 million FIESP-tied Brazilian personal records, including names, national ID numbers, home addresses, and contact details.
Published
Collected

original ↗

Related coverage

incident · hackenproof.com
Kars4Kids Data Breach: Donor Records and Admin Credentials Exposed
An unsecured MongoDB exposed emails, home addresses, and super admin credentials for 21,612 Kars4Kids donors, with a ransom note demanding 0.6 BTC found inside the database.
blog · hackenproof.com
Brazilian personal data exposure
HackenProof's report covered a large-scale exposure of Brazilian personal data and its privacy implications.
incident · hackenproof.com
French Data Breach: MisterTemp Job Agency Exposed Millions of Records
An unprotected Elasticsearch cluster exposed 2.9 million French job-seeker records, including ID documents—what happened, and why the same company was breached again in 2026.
incident · hackenproof.com
Adapt.io Data Breach: 9.3 Million Business Contact Records Exposed
An unprotected MongoDB database exposed 9.3 million B2B contact records tied to Adapt.io—what was found, the GDPR risk, and what buyers should know before using it today.
incident · hackenproof.com
New Data Breach Exposes 57 Million Records
HackenProof revisits the 2018 open-Elasticsearch breach of 57 million US records—and eight years of larger misconfiguration leaks since, a pattern that keeps growing rather than going away.
blog · hackenproof.com
No more privacy: 202 Million private resumes exposed
HackenProof reported on an incident exposing over 200 million private resumes, raising major privacy concerns.
back