A data security incident with the dfndr lab, PSafe’s cybersecurity laboratory in a Brazilian database exposed the CPF number and other confidential information of millions of people.
The leaked data contained detailed information of 104 million vehicles and about 40 million companies making almost 220 million people potentially vulnerable.
The information containing number, license plate, municipality, color, make, model, year of manufacture, engine capacity and even the type of fuel used incase of vehicles and in the case of legal entities, the following were leaked: CNPJ, corporate name, trade name and date of foundation were also traded illegally in some dark web forum
Source: https://www.somagnews.com/giant-leak-exposes-data-from-almost-all-brazilians/
TPRM report: https://scoringcyber.rankiteo.com/company/psafe
"id": "psa233918622",
"linkid": "psafe",
"type": "Breach",
"date": "01/2021",
"severity": "100",
"impact": "6",
"explanation": "Attack threatening the economy of a geographical region"{'affected_entities': [{'customers_affected': 220000000,
'industry': 'Cybersecurity',
'location': 'Brazil',
'name': "dfndr lab, PSafe's Cybersecurity Laboratory",
'type': 'Cybersecurity Laboratory'}],
'data_breach': {'data_exfiltration': True,
'number_of_records_exposed': 220000000,
'personally_identifiable_information': True,
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personal Information',
'Vehicle Information',
'Corporate Information']},
'description': 'A data security incident with the dfndr lab, PSafe’s '
'cybersecurity laboratory in a Brazilian database exposed the '
'CPF number and other confidential information of millions of '
'people.',
'impact': {'data_compromised': ['CPF number',
'vehicle information',
'CNPJ',
'corporate name',
'trade name',
'date of foundation']},
'initial_access_broker': {'data_sold_on_dark_web': True},
'title': "Data Breach at dfndr lab, PSafe's Cybersecurity Laboratory",
'type': 'Data Breach'}