Serviceaide AI Infrastructure Exposure Leaks Patient Data
Serviceaide AI Platform, Elasticsearch
A misconfigured Elasticsearch database tied to an AI infrastructure exposed sensitive medical records of nearly half a million patients. The incident led to regulatory scrutiny and legal investigations.
- first report
- 9 May 2025
- last update
- 9 May 2025
Timeline · 1
Sources · 1
Research and catalogues
- 2025-05-09Serviceaide AI Platform Implicated in Health Data Exposure Affecting 483,000 Catholic Health PatientsAI Incident Database · incidentdatabase.ai/cite/1070
Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.
Classification
- AI role
- Attack on AI
- categories
- Data leak
- severity
- 4 · Confirmed real-world loss
- targets
- Enterprise deployment
- owasp llm top 10
- LLM02:2025 Sensitive Information Disclosure
- mitre atlas
- no technique for these categories
- dates
- happened 9 May 2025 · first reported 9 May 2025
- origin
- AI Incident DatabaseDerived from the AI Incident Database (CC BY-SA 4.0).
- record
- confidence 0.85 · created 2026-10-18 06:33Z · updated 2026-10-18 06:59Z
Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned
Copy a brief
This record as a short Markdown brief, for a ticket, a chat or a coding agent.
the brief as text
# Serviceaide AI Infrastructure Exposure Leaks Patient Data https://gcdradar.vercel.app/incidents/serviceaide-ai-infrastructure-exposure-leaks-patient-data · AIR-2025-0108 · closed 2025-05-23 - Lane: Breaches & attacks - Severity: 4 (Confirmed real-world loss) - Fix status: No fix needed - First reported: 2025-05-09 - AI role: Attack on AI - Products: Serviceaide AI Platform, Elasticsearch ## Summary A misconfigured Elasticsearch database tied to an AI infrastructure exposed sensitive medical records of nearly half a million patients. The incident led to regulatory scrutiny and legal investigations. ## What to do No action recorded; read the sources below and the vendor's advisory. ## Latest updates - 2025-05-09: Serviceaide AI Platform Implicated in Health Data Exposure Affecting 483,000 Catholic Health Patients (https://incidentdatabase.ai/cite/1070) ## Sources - 2025-05-09 AI Incident Database: Serviceaide AI Platform Implicated in Health Data Exposure Affecting 483,000 Catholic Health Patients https://incidentdatabase.ai/cite/1070 Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.
Related
- closedChatGPT CISA Acting Director Uploaded Sensitive Documents to Public ChatGPT
Breaches & attacks · Exploited · since 15 Jul 2025
AI - closedGenNomis GenNomis AI database exposes 100,000 synthetic and nudify images publicly
Research · since 31 Mar 2025
AI - liveRailway Railway Breach Leads to Stolen AI Keys and $740,000 in Unauthorized Usage
Breaches & attacks · Real loss · since Oct 2026 (approx.)
AI - liveRAG SNAPRAG: Cost-efficient knowledge extraction attack on RAG systems via adversarial perturbations
Research · since 10 Nov 2026
AI - liveSGLang SGLang RCE Exploit Breaches NEAR AI, Steals Data From 18 Agents
Breaches & attacks · Exploited · since 8 Nov 2026
AI - livemedical AI agents Silent PHI Leakage by Medical AI Agents Demonstrated via Canary Embedding
Research · since 3 Nov 2026
AI