A misconfigured and unprotected database belonging to Archer Health Inc. (a California-based in-home healthcare provider) exposed over 145,000 sensitive files (23GB) containing patient records, including names, Social Security numbers (SSN), addresses, phone numbers, medical histories, patient IDs, care plans, discharge forms, and internal communications. Some folders were explicitly labeled with patient names, while others included screenshots of healthcare management dashboards revealing scheduling, provider details, and confidential records. The exposure—discovered by researcher Jeremiah Fowler—posed severe risks such as identity theft, fraud, and HIPAA violations. Though the database was secured within hours of notification, the duration of exposure and potential unauthorized access remain unknown. Patients face long-term risks if their data was copied or exploited, while the company may encounter legal repercussions, including lawsuits under privacy laws, similar to cases like IMDataCenter’s AWS bucket breach.