WHAT'S THIS ABOUT?

On November 15, 2024, Serviceaide, Inc. became aware of a security incident on its Catholic Health Elasticsearch database. Upon detection, Serviceaide launched an investigation with the assistance of third-party cyber security experts to determine the nature and scope of the incident. The investigation determined that an unauthorized third party gained access to sensitive data, making certain patient information from Catholic Health was publicly available between September 19 and November 5, 2024.

Serviceaide conducted a comprehensive review of the impacted data to determine what information was compromised and identified affected individuals. On March 20, 2025, Serviceaide identified persons whose sensitive data was included in the impacted data. The potentially impacted files contained personal information including name, Social Security number, date of birth, medical record number, patient account number, medical/health information, health insurance information, prescription/treatment information, clinical information, provider name, provider location, and email/username and password.