About two months ago, a service provider for the Brazilian Television System (SBT) was hacked, and sensitive information was stolen (which, according to the LGPD, is characterized as personal data that reveals racial, ethnic, political, religious, affiliation, genetic, biometric, health, sexual life and/or sexuality), in addition to: Full names, documentation (proof of registration status), address and date of birth of employees and former employees, also affecting SBT employees.
In a statement, the television group stated that: “Upon being informed of this fact, together with the service provider, we took all legal and operational measures in relation to the incident, to protect the data of the holders involved”.
After the possible violation of the privacy of countless people, SBT created the 0800 hotline and an email address to report any suspicious activity on the part of those offended, and also made itself available to answer questions from data subjects.
SBT reported that it was not possible to identify how many people were affected by the attack. According to a statement issued: “All security measures necessary to strengthen our governance structure and information security continue to be reiterated to better protect your personal data.”
This event brings to light yet another case of information security failure that directly affects the rights of data subjects protected by the LGPD, now within the scope of one of the best-known communication networks in Brazil, showing that there is no alternative for companies to avoid adapting to the precepts of privacy and data protection, since this is a global movement that simultaneously impacts all business entities in a connected economy, regardless of the sector of economic activity carried out.
