Tens of thousands of Brazilian soccer fans have been exposed as a publicly-accessible cloud storage bucket leaked several gigabytes of data with sensitive information stretching back several years.
Personal data belonging to supporters of a number of Brazilian organisations was involved in the incident, but the vast majority of the individuals exposed are fans of São Paulo-based soccer team Palmeiras, one of the country’s most popular and successful Brazilian clubs, with around 18 million supporters nationwide.
The 25GB sample analysed contained a myriad of CSV files listing tens of thousands of names, contact details, dates of birth, marital status, social security numbers, payment method used for the membership subscription and even details such as shirt sizes and a log of comments fans made when signing up.
https://twitter.com/marketemia/status/1225336991685980161
The opinions expressed in this post belongs to the individual contributors and do not necessarily reflect the views of Information Security Buzz.