May 9, 2025Confirmed
Serviceaide AI Platform Implicated in Health Data Exposure Affecting 483,000 Catholic Health Patients
Rogue: Caused harmAI loose in the worldData exfiltrationDERIVED
Approved by person, Oct 11, 2026. How entries are approved
An AI-linked platform operated by Serviceaide exposed sensitive health data from Catholic Health, affecting 483,000 patients. The breach stemmed from a misconfigured Elasticsearch database used in Serviceaide’s agentic AI infrastructure. Exposed information included medical records, insurance details, and login credentials. While no misuse has been confirmed, the nature of the data has prompted regulatory scrutiny and legal investigations.
What this means for youAt home: if you are a Catholic Health patient, watch for notices, check insurance statements, and change reused passwords. At work: ask vendors how AI tools store data and who checks their database settings. In government: regulators are looking into the exposure.
Sources
- AI Incident Databasehttps://incidentdatabase.ai/cite/1070
Data from the AI Incident Database (incidentdatabase.ai), licensed CC BY-SA 4.0 (https://creativecommons.org/licenses/by-sa/4.0/). McGregor, S. (2021) Preventing Repeated Real World AI Failures by Cataloging Incidents: The AI Incident Database. IAAI-21.
Source data license: CC BY-SA 4.0 (database). Report contents keep their own rights; reports.text, submissions, images and videos are excluded from the data license.
rogue:R4
Covered by snapshot 45
da93f03b406f409940d0a6ef47b526607f82ebf457d98f69299b88aceede576a
This entry is record number 2043. It has not been edited since it was approved; the hash above would not match if it had. How to verify