DataSUS & DETRAN Brazil 2019 Data Breach
Massive Brazilian government public records databases belonging to the Ministry of Health's Department of Informatics (DataSUS) and the State Traffic Department (DETRAN) were exfiltrated in 2019 and subsequently released publicly on BreachForums in 2024.
Exposed Data Types
6- Government issued IDs
- Names
- Phone numbers
- Physical addresses
- Dates of birth
- Vehicle details
About This Record
The compromised compilation contains two extensive databases totaling over 288 million rows: datasus.csv comprises 184,377,363 citizen health system records, and detran.csv comprises 104,193,161 national vehicle registration records. The DataSUS breach exposed citizen CPF tax identification numbers, maternal and paternal names, birthplaces, complete physical residential addresses, postal codes (CEP), RG state identity documents, CNS health insurance identifiers, and phone numbers. The DETRAN dataset contains vehicle identification numbers (VIN/chassis), license plate numbers, engine serials, and registered owner tax IDs.
Covering virtually the entire adult population of Brazil, this composite exposure presents severe risks for synthetic identity fraud, unauthorized credit issuance, targeted phishing, and vehicle cloning operations due to the inclusion of full official identifiers alongside genealogical details.
Affected individuals are urged to monitor their CPF registration through the Central Bank of Brazil's Registrato portal and set fraud alerts against suspicious credit applications.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
