The information displayed in the AIM should not be reported as representing the official views of the OECD or of its member countries.
Sensitive data from São Paulo's Smart Sampa AI surveillance system, including images from over 58,000 cameras with facial recognition, was illegally leaked online for 11 months by an authorized security agent. The breach exposed footage from public spaces, schools, and hospitals, raising serious privacy concerns. Authorities have suspended the agent and enhanced security measures.[AI generated]
Why's our monitor labelling this an incident or hazard?
The Smart Sampa system is an AI system employing facial recognition. The leak of sensitive data, including images of individuals and access credentials, is a direct harm to privacy and potentially human rights. The breach was caused by misuse of the AI system's data by an insider, leading to unauthorized exposure. This fits the definition of an AI Incident because the AI system's use and the resulting data leak have directly led to harm (violation of rights and harm to communities). The event is not merely a potential hazard or complementary information, but a realized incident involving AI.[AI generated]