The IT Nerd

Cybersecurity researcher Jeremiah Fowler recently discovered and reported to ExpressVPN about an unsecured database containing data belonging to Brazil’s Health Surveillance Information System, known as SISVISA.

The data exposed included, but was not limited to:

• Over 102,000 documents (~79GB of data), representing a significant and wide-scale security vulnerability.
• Sensitive PII, including names, CPF/CNPJ numbers, contact details, and physical addresses, with the potential to directly impact individuals’ privacy and safety.
• Regulatory and compliance records, including inspection reports, health surveillance documentation, permit applications, and backup files, heightening the risk of institutional and legal repercussions.

You can read the details here: https://www.expressvpn.com/blog/brazil-sisvisa-data-exposed/.

Cybersecurity researcher Jeremiah Fowler recently discovered and reported to ExpressVPN about multiple unsecured databases containing records linked to the Tribeca Film Festival. The exposed data included, but was not limited to:

• 666,369 total records across three unsecured databases labeled “development,” “staging,” and “production,” spanning records from 2019 to 2026.
• A production backup file with 295,916 records containing sensitive PII — email addresses, phone numbers, IP addresses, and hashed passwords — tied to users, film contacts, and more.
• Confidential documents, press kits, and marketing materials, some explicitly marked as confidential, potentially exposing A-list talent and industry professionals associated with the festival.

Jeremiah’s full findings and key takeaways are published on this blog: https://www.expressvpn.com/blog/tribeca-film-festival-data-exposed/