Serviceaide, Inc.

Serviceaide, Inc. notified the New Hampshire AG of a data event affecting 32 NH residents. Patient information in its Catholic Health database was inadvertently made publicly available between Sept 19 and Nov 5, 2024. Serviceaide discovered the incident on Nov 15, 2024, secured the database, and engaged a vendor for data review. No evidence of copying was found, but exfiltration could not be ruled out. Notices were sent to residents and regulators on May 9, 2025, with credit monitoring offered.

Affected (this filing):

Serviceaide, Inc. notified consumers that patient information from a Catholic Health Elasticsearch database was inadvertently made publicly available between September 19 and November 5, 2024. Data potentially exposed included names, SSNs, DOBs, medical record numbers, and credentials. Serviceaide secured the database, engaged forensic review, reported to HHS, and offered 12 months of credit monitoring.