Brazil
Government
Brazilian DETRAN SP Database of 13 Million Records Allegedly Leaked for Free
A threat actor using the alias pl4t0v has posted what they describe as a database from DETRAN SP, the motor-vehicle and identity authority of São Paulo state in Brazil, claiming 13 million lines (about 1.59GB) in SQLite format, and is sharing it for free. Per the sample and table schema, each record reportedly contains an exceptionally complete identity profile: full name, CPF and RG national identification numbers, date of birth, gender, parents' names, full residential address, multiple phone numbers, email addresses, marital status, and references to ID photos and biometric collection. Because this combines Brazil's core national identifiers with family and address data at scale, it is extremely sensitive. The dataset's authenticity and scope are unverified.
Brazil▣Post details
Brazil (São Paulo)!Allegedly included
- ~13M records (claimed)
- Full names
- CPF & RG national IDs
- Dates of birth & gender
- Parents' names (filiação)
- Full residential addresses
- Phones & email addresses
- ID photo & biometric references
◱Screenshot(s)
⚠Potential impact
This is a critical exposure because it concerns Brazil's core national identifiers at massive scale. The records reportedly pair full names with CPF and RG numbers, dates of birth, parents' names, and full addresses, which is precisely the combination used in Brazil to open bank accounts, obtain credit and loans, and pass identity-verification checks. With this data, criminals can commit large-scale identity theft, financial fraud, and account takeover, and can craft highly convincing phishing and impersonation using verified personal details. The presence of references to ID photos and biometric collection adds a further, harder-to-remediate dimension, since national ID numbers and biometric data are permanent and cannot be reset. Because the dataset is reportedly free to download, any exposure may already be spreading widely. No records, identifiers, names, addresses, contact details, or download links are reproduced here. The authenticity and scope are unverified.
iStatus
UnverifiedA sample, the table schema, and a free download link were posted to a forum; the sample records, personal identifiers, and the download link are not reproduced here. The actor describes the data as a free leak of the DETRAN SP database. The claim has not been independently confirmed, and DETRAN SP has not publicly addressed it. Given the scale and sensitivity, this would warrant urgent attention from Brazilian authorities, including the ANPD (the national data-protection authority).
DARK WEB INFORMER - THREAT INTELLIGENCE
