Get the latest tech news

A misconfigured server from a US-based AI healthcare firm exposed 5.3 TB of sensitive mental health records, including personal details, assessments, and medical information, posing serious privacy risks for patients.


Follow us on Twitter (X) @Hackread - Facebook @ /Hackread

Cybersecurity researcher Jeremiah Fowler discovered a non-password-protected misconfigured server containing confidential records from Confidant Health, a Texas-based AI platform offering mental health and addiction treatment services to residents of Connecticut, Florida, New Hampshire, Texas, and Virginia. For your information, Confidant Health offers a range of services including alcohol rehab, an online suboxone clinic, pre-addiction treatment, a behaviour change program, a recovery coach, opioid withdrawal management, and medication-assisted treatment, and has a Telehealth Addiction Recovery app with over 10,000 downloads. The documents revealed psychotherapy intake notes and psychosocial assessments detailing mental health, substance abuse, family issues, psychiatric history, trauma history, medical conditions, and additional diagnoses, Fowler explained in a report shared with Hackread.com ahead of publishing on Friday.

Get the Android app

Or read this on r/technology

Read more on:

Photo of patients

patients

Photo of medical information

medical information

Photo of privacy risks

privacy risks

Related news:

News photo

How a leading chain of psychiatric hospitals traps patients

News photo

Australian IVF company reaches $56 million ‘no admission of liability’ settlement with 700 former patients, after destroying potentially viable embryos

News photo

How one ED mobilized his department during a mass casualty incident (2017)