Breach Details

The Smart Sampa platform, used by São Paulo's municipal security service, suffered a new security flaw that enabled unauthorized access to 17,000 cameras and live feeds, according to Canaltech.

Historical Context

The breach, the second major incident in three weeks, followed an earlier investigation by the state Public Prosecutor's Office that uncovered a 58,000‑camera exposure over 11 months.

The vulnerability stemmed from a flaw in Sentinelx's source code that exposed service endpoints, allowing attackers to retrieve camera links and sensitive data; the city had previously mandated facial recognition for access after the first breach. The compromised links were removed after five days.