Therapy Sessions Exposed by Mental Health Care Firm's Unsecured Database

A significant data breach occurred at Confidant Health, a virtual medical provider, exposing sensitive patient information, including audio and video recordings of therapy sessions. Security researcher Jeremiah Fowler discovered the unsecured database, which contained over 120,000 files and 1.7 million activity logs, revealing personal health details and psychiatric intake notes. The exposed data included confidential information about patients' medical histories, family traumas, and even administrative documents like driver’s licenses and insurance cards. Confidant Health quickly addressed the issue after being notified, claiming that less than 1% of the files were accessible due to an improper configuration. The company conducted a security audit and stated that no malicious access to the data was found. Experts warn that such breaches pose significant privacy risks, especially as healthcare providers expand their services. The incident serves as a reminder for healthcare organizations to prioritize data security, particularly in the rapidly growing telehealth sector.

- Confidant Health's database exposed sensitive patient information, including therapy session recordings.

- Over 120,000 files and 1.7 million activity logs were publicly accessible due to an unsecured database.

- The company addressed the breach promptly after being alerted by a security researcher.

- Experts emphasize the importance of data security in healthcare, especially with the rise of telehealth services.

- The incident highlights ongoing risks associated with improper database configurations in the healthcare industry.