Maida.health, a Brazilian health technology company, allegedly suffered a massive data breach involving the leak of 2.3TB of sensitive medical and personal data belonging to Brazil’s military police. The exposed records include diagnostic reports (cardiology, neurology, gynecology), identification cards, healthcare contracts, patient details, and administrative protocols, covering both personnel and their families. A threat actor advertised the stolen data on an underground forum, raising concerns over identity theft, medical fraud, and unauthorized access to highly confidential health records. The breach poses severe risks, as criminals could exploit the data to impersonate victims for medical services, obtain prescription drugs fraudulently, or conduct targeted scams. While the authenticity of the leak remains unverified, the potential scale—affecting a military-linked healthcare system—heightens national security and privacy concerns. Brazil has faced repeated large-scale data exposures, including a 2024 incident where 223 million citizens' records (exceeding the country’s population) were left unprotected. The healthcare sector’s vulnerability to such attacks underscores its status as a prime target for cybercriminals due to the high-value sensitive data it handles.