gcdRadar
closedclosed 23 May 2025Breaches & attacks4 Confirmed real-world lossAI

Serviceaide AI Infrastructure Exposure Leaks Patient Data

Serviceaide AI Platform, Elasticsearch

A misconfigured Elasticsearch database tied to an AI infrastructure exposed sensitive medical records of nearly half a million patients. The incident led to regulatory scrutiny and legal investigations.

first report
9 May 2025
last update
9 May 2025

Timeline · 1

  1. 9 May 2025Serviceaide AI Platform Implicated in Health Data Exposure Affecting 483,000 Catholic Health Patients

Sources · 1

Research and catalogues

  1. 2025-05-09

Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.

Classification

AI role
Attack on AI
categories
Data leak
severity
4 · Confirmed real-world loss
targets
Enterprise deployment
mitre atlas
no technique for these categories
dates
happened 9 May 2025 · first reported 9 May 2025
origin
AI Incident Database
Derived from the AI Incident Database (CC BY-SA 4.0).
record
confidence 0.85 · created 2026-10-18 06:33Z · updated 2026-10-18 06:59Z

Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned

Copy a brief

This record as a short Markdown brief, for a ticket, a chat or a coding agent.

the brief as text
# Serviceaide AI Infrastructure Exposure Leaks Patient Data

https://gcdradar.vercel.app/incidents/serviceaide-ai-infrastructure-exposure-leaks-patient-data · AIR-2025-0108 · closed 2025-05-23

- Lane: Breaches & attacks
- Severity: 4 (Confirmed real-world loss)
- Fix status: No fix needed
- First reported: 2025-05-09
- AI role: Attack on AI
- Products: Serviceaide AI Platform, Elasticsearch

## Summary

A misconfigured Elasticsearch database tied to an AI infrastructure exposed sensitive medical records of nearly half a million patients. The incident led to regulatory scrutiny and legal investigations.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2025-05-09: Serviceaide AI Platform Implicated in Health Data Exposure Affecting 483,000 Catholic Health Patients (https://incidentdatabase.ai/cite/1070)

## Sources

- 2025-05-09 AI Incident Database: Serviceaide AI Platform Implicated in Health Data Exposure Affecting 483,000 Catholic Health Patients https://incidentdatabase.ai/cite/1070

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.

Related

  1. closed
    ChatGPT CISA Acting Director Uploaded Sensitive Documents to Public ChatGPT

    Breaches & attacks · Exploited · since 15 Jul 2025

    AI
  2. closed
    AI
  3. live
    Railway Railway Breach Leads to Stolen AI Keys and $740,000 in Unauthorized Usage

    Breaches & attacks · Real loss · since Oct 2026 (approx.)

    AI
  4. live
    AI
  5. live
    SGLang SGLang RCE Exploit Breaches NEAR AI, Steals Data From 18 Agents

    Breaches & attacks · Exploited · since 8 Nov 2026

    AI
  6. live
    AI