The exposed data includes national identity numbers, facial verification selfies, full names, CPF tax IDs, phone numbers, and AWS access credentials — painting a troubling picture of both individual and systemic risk. As Brazil moves rapidly toward integrating biometric verification and digital ID into its national infrastructure, this incident highlights how fragile such digital identity systems can be, especially as more and more countries are pushing to implement the controversial system.