Live data from Hacker News

Giant leak exposes data from almost all Brazilians

somagnews.com

111–120 of 134 posts

Re: Giant leak exposes data from almost all Brazilians

#111
post #67

Earlier quoted context omitted.

Yes. The hacker has a contact email where you can send queries using the CPF (unique for each Brazilian) of whoever you want. He'll then send you a bitcoin address for payment and send you back the info.

It would be pretty short-sighted to reward such an individual.

I’ve already had to reward the government and credit bureaus to get access to my data. I don’t see anything too different about rewarding this hacker just because the law doesn’t bless this sort of data extortion like it does the rest.

Re: Giant leak exposes data from almost all Brazilians

#112
post #4

Earlier quoted context omitted.

I treat my face, name, birthday and numbers as open data. Maybe companies should stop using these things for verification and start allowing people to use cryptography more efficiently.

I treat my face, name, birthday and numbers as open data. So because you don't value privacy and choose not to control you personal data, nobody else deserves privacy or to control their personal data?

I don’t believe that the phone book was an immoral institution, no. Or the county register of deeds, or the vital statistics office, or the school directory, or the voter registration rolls, or the court records.

Privacy is important, there are things that must be kept confidential, but the basic facts of a person’s existence are not necessarily among them.

Re: Giant leak exposes data from almost all Brazilians

#113

I don't see how it can be new. When I lived some years in Brazil (around 1999-2001), and you could buy at a specific street in Sao Paulo, a CD with all the taxes information from every brazilian citizen.

What's the idea behind selling this out in the clear ?

Re: Giant leak exposes data from almost all Brazilians

#114

> vulnerable to 220 million people. In a country with 207 million people. This means that even the dead can't rest in peace. On the bright side, we'll not have any data leaks anymore because there will be no more secrets to leak. :)

Only 207 million? I thought there was at least a brazillian.

Re: Giant leak exposes data from almost all Brazilians

#115
post #40

The Brazilian blog "Tecnoblog" has the full details here[1], with a list of all the information allegedly included in this data. If they are correct that's pretty much everything about everybody... I mean personal info (like addresses and phones, family, education, employer), financial info (like bank accounts, salary, credit score, creditors, bounced checks, whether receiving government assistance), other background…

Looks like it's Experian -- again.

https://www.serasaexperian.com.br/

https://en.wikipedia.org/wiki/Experian#2015_data_breach

https://en.wikipedia.org/wiki/Experian#2020_data_breach

Re: Giant leak exposes data from almost all Brazilians

#116

I don't see how it can be new. When I lived some years in Brazil (around 1999-2001), and you could buy at a specific street in Sao Paulo, a CD with all the taxes information from every brazilian citizen.

Tax information isn't that harmful, many Nordic countries release it as a public service.

This appears to be a new leak of Experian's Brazilian database, which contains basically everything about everybody.

Re: Giant leak exposes data from almost all Brazilians

#118

I don't see how it can be new. When I lived some years in Brazil (around 1999-2001), and you could buy at a specific street in Sao Paulo, a CD with all the taxes information from every brazilian citizen.

Tax information isn't that harmful, many Nordic countries release it as a public service. This appears to be a new leak of Experian's Brazilian database, which contains basically everything about everybody.

I think OP's point was that Brazil has always had illegal structures for data exfiltration and so on...

Re: Giant leak exposes data from almost all Brazilians

#119

I don't see how it can be new. When I lived some years in Brazil (around 1999-2001), and you could buy at a specific street in Sao Paulo, a CD with all the taxes information from every brazilian citizen.

I remember seeing the news, years ago, that a guy was trying to discover were spammers were getting his email. So he created a bunch of emails for different things. Guess which email started receiving spam very quickly? Yeah, the one he used for taxes

I've been doing this for exact 20 years this week. I always use a unique address for each site (pretty easy; I just use a wildcard domain).

Pretty much everything has been leaked: most retailers, software companies, all phpBB forums, wordpress blogs, Experian, Amazon (3P Sellers, not AMZN itself), Dropbox, LinkedIn. The list goes on and on.

Notable exceptions: Google, Microsoft, Apple, IRS.

These days is a lot harder to see leaks, as most egregious spams get filtered even before it hits your server (I use GSuite).

Re: Giant leak exposes data from almost all Brazilians

#120

> vulnerable to 220 million people. In a country with 207 million people. This means that even the dead can't rest in peace. On the bright side, we'll not have any data leaks anymore because there will be no more secrets to leak. :)

Only 207 million? I thought there was at least a brazillian.

No, Donald...
Post reply on HN