A misconfigured database at Serviceaide exposed sensitive health and personal information of approximately 500,000 patients linked to Catholic Health, a non-profit healthcare system based in New York. The data leak occurred between September 19 and November 5, 2024, and was discovered on November 15, 2024. The exposed data included full names, dates of birth, prescription data, Social Security numbers, health insurance details, healthcare provider information, treatment and clinical information, medical record and account numbers, email addresses, usernames, and passwords. Although there’s no confirmed evidence that the data was downloaded or misused, the company admitted it cannot rule out that possibility.

On May 9, 2025, Serviceaide, Inc. reported a security incident involving the inadvertent public exposure of certain patient information from its Elasticsearch database related to Catholic Health. The exposure occurred between September 19, 2024, and November 5, 2024, potentially affecting various personal health information, including names and Social Security numbers, although no evidence of actual misuse was identified.