> The article talks about data of real people (not companies), but doesn't say what leaked about them.

Personal data (CPF, Birth day and so on), credit scores, social class, acquisitive power, and other informations that a company specialised in credit score have. (the leak is probably from a credit score company).