A large public-sector repository tied to SISVISA reportedly exposed identity documents and tax IDs without password protection, turning a configuration problem into a privacy and compliance risk.