Brazilian firm allegedly used AI to illegally resell SUS patient data
In February 2026, the Brazilian Federal Police launched Operation Glycon to dismantle a business structure illegally commercializing sensitive health data from the Unified Health System (SUS). The company allegedly used an AI-powered tool designed for health professionals to gain unauthorized access to clinical records.
The system allowed unauthorized access to confidential clinical information of patients through queries using identifying data.
Key facts
- What
- In February 2026, the Brazilian Federal Police launched Operation Glycon to dismantle a business structure illegally commercializing sensitive health data from the Unified Health System (SUS).
- Incident date
- Feb 4, 2026
- Who
- Unnamed company (investigated in Operation Glycon)
- Failure mode
- Data Leakage
- AI surface
- Chatbot
- Severity
- Catastrophic
What happened
On February 4, 2026, the Brazilian Federal Police executed Operation Glycon against a company suspected of illegally accessing and selling sensitive patient data from the Unified Health System (SUS). The investigation was triggered after the Ministry of Health's DATASUS reported a cyber security incident involving an AI-based tool marketed by the company under investigation. Federal authorities issued search and seizure warrants and ordered the immediate suspension of the company's domains and APIs.
What broke inside the model
- 01 · TriggerA request triggers retrieval or context loading.
- 02 · Model stepThe context pulls in another user's content.
- 03 · Control gapNo boundary enforces isolation at the moment of output.
- 04 · FailurePrivate data crosses into the response.
- 05 · ConsequenceOne user sees another's data, and disclosure follows.
One user's content crosses the retrieval boundary into another's response.
The failure occurred due to weaknesses in access control and authentication; the system allowed unauthorized queries using identifying data to retrieve patient information, bypassing protections meant to safeguard privacy.
What it cost
Sources
Cite this entry
https://failureindex.ai/failures/brazilian-allegedly-used-illegally-resell-susAI Failure Index. "Brazilian firm allegedly used AI to illegally resell SUS patient data" (FI-0262). Realm Labs. https://failureindex.ai/failures/brazilian-allegedly-used-illegally-resell-sus (indexed Jun 5, 2026).Data fields CC-BY 4.0, prose citation permitted. Incident ID FI-0262. Full dataset at /data.
Note from Realm Labs, the Index steward
How Realm would have caught this
- Prism
- OmniGuard
- AI Detection & Response (AIDR)
Realm can detect when a response is about to emit data that falls outside the bounds of the current user and context, and block or redact it inline, at the moment of generation rather than after the data has left.