The personal and health information of more than 16 million Brazilian COVID-19 patients has been leaked online after a hospital employee uploaded a spreadsheet with usernames, passwords, and access keys to sensitive government systems on GitHub.
E-SUS-VE and Sivep-Gripe, two government databases used to keep information on COVID-19 patients, were among the systems that had credentials exposed.
The two databases held private information, including medical records including medical histories and drug regimens as well as patient names, residences, and ID numbers.
The spreadsheet containing the credentials was discovered by a GitHub user on the personal account of an employee of the Albert Einstein Hospital in the city of Sao Paolo.
"id": "HOS34512623",
"linkid": "hospital-albert-einstein",
"type": "Data Leak",
"date": "11/2020",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"