Breaches and incidents
Hospital Sirio-Libanes (Sao Paulo, Brazil): possible unauthorized access to internal reporting system for social projects
The hospital announced on Friday 16 Oct that an incident on 21 Sep hit an internal reporting system, not the general patient database, and may have exposed...
- Disclosed
- Verification
- Reported by a reputable outlet, citing the company
What happened
- The hospital announced on Friday 16 Oct that an incident on 21 Sep hit an internal reporting system, not the general patient database, and may have exposed registration and contact data (name, RG, CPF, address, email, phone) and sensitive data such as health, race or ethnicity of patients and staff linked to social projects (SBT News).
- Root cause: not disclosed.
- No attacker named.
- The hospital said investigations found no evidence of public leakage or misuse, care systems operate normally, and the case was reported to ANPD and the Federal Police.