São Paulo Prosecutors Open Probe Into Smart Sampa Data Leak

Overview

• Tuesday reporting by UOL prompted official action after journalists said a public repository exposed operational data for about 11 months and could allow access to images from more than 58,000 cameras.
• The city confirmed a data leak, said it identified and afastou an implicated municipal server, and reported that the exposed repository was removed and authentication measures were tightened.
• The Ministério Público de São Paulo opened an apuração and distributed the case to Promotorias do Patrimônio Público to assign a promotor who will decide whether to launch a civil inquérito.
• The Guarda Civil Metropolitana’s Corregedoria has started an internal administrative inquiry into the conduct of the singled-out server while the municipality disputes some details of the published account, including claims about exposed passwords.
• Security experts and researchers called for an urgent review of access controls and continuous monitoring because exposed operational data and credentials can be misused to track people, reveal where police units are located, or target public facilities.