Serviceaide
Disclosed May 9, 20251 year ago483,126 affectedSettled
Unsecured Serviceaide database exposed 483,126 Catholic Health patients
IT service management and agentic AI vendor Serviceaide said a Catholic Health Elasticsearch database was exposed online without authentication between September 19 and November 5, 2024, containing data of 483,126 patients including SSNs and medical data. It settled litigation for $1.8 million.
What is known
| People affected | 483,126 (as reported by the organization) |
|---|---|
| Disclosed | May 9, 2025 |
| Discovered | Nov 15, 2024 |
| Attack | Exposed data |
| Data exposed | Names, Dates of birth, Social Security numbers, Health, Insurance, Credentials and tokens |
| Sector | AI · US |
| Status | Settled |
| Lawsuit or fine | $1.8M class action settlement (2026) |
Sources
| Source | |
|---|---|
| May 2025 Healthcare Data Breach Reporthipaajournal.com · News | News |
| Serviceaide Pays $1.8 Million to Settle Data Breach Litigationhipaajournal.com · News | News |
| Unsecured Serviceaide Database Exposed Data of 483,000 Catholic Health Patientshipaajournal.com · News | News |
| Vermont Attorney General: 2025-05-09 Serviceaide Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Serviceaide (Business Associate, CA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Vermont AGresidents of VT | May 9, 2025 | |
| HHS archivetotal | May 9, 2025 | 483,126 |
| Researchtotal | May 19, 2025 | 483,126 |
History of this record
- 2026-09-25 · source: empty to https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf · backfill source
- 2026-09-25 · source_type: press to official · backfill source
- 2026-09-25 · source_url: https://www.hipaajournal.com/serviceaide-data-breach/ to https://ago.vermont.gov/document/2025-05-09-serviceaide-data-breach-notice-consumers · backfill source
- 2026-09-25 · verified_by: empty to vt-ag · backfill source
- 2026-09-25 · verified: 0 to 1 · backfill source
- 2026-09-25 · disclosed: 2025-05-19 to 2025-05-09 · backfill source
- 2026-09-25 · added · seed source
First seen 2026-09-25 (Research), confirmed by Vermont AG. Record counts are as reported. Not legal advice.