Serviceaide, Inc.

Serviceaide, Inc. notified Nebraska AG that patient information from Catholic Health was inadvertently made publicly available between Sept 19 and Nov 5, 2024. Serviceaide discovered the misconfiguration on Nov 15, 2024, secured the database, and engaged a vendor to review data. Approximately 10 Nebraska residents were notified on May 9, 2025. Data included names, SSNs, DOBs, medical records, and credentials. No evidence of copying was found, but exfiltration could not be ruled out. Credit monitoring was offered.

Serviceaide, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-05-09. 134 Massachusetts residents were affected.

Serviceaide, Inc. notified the New Hampshire AG of a data event affecting 32 NH residents. Patient information in its Catholic Health database was inadvertently made publicly available between Sept 19 and Nov 5, 2024. Serviceaide discovered the incident on Nov 15, 2024, secured the database, and engaged a vendor for data review. No evidence of copying was found, but exfiltration could not be ruled out. Notices were sent to residents and regulators on May 9, 2025, with credit monitoring offered.

Serviceaide, Inc. notified consumers that patient information from a Catholic Health Elasticsearch database was inadvertently made publicly available between September 19 and November 5, 2024. Data potentially exposed included names, SSNs, DOBs, medical record numbers, and credentials. Serviceaide secured the database, engaged forensic review, reported to HHS, and offered 12 months of credit monitoring.

Serviceaide, Inc. reported to HHS on 2025-05-09 a Unauthorized Access/Disclosure affecting 483,126 individuals. Breached information located on Network Server. PHI including names, SSNs, addresses, diagnoses, lab results, and medications was made publicly available via the Internet.