Cense AI exposes 2.5 million personal records on open database
Date: 2020-07
Affected: Cense AI / 2.5M individuals
Attack vector: data-exfiltration
Category: real-world
Severity: High

Healthcare-AI startup Cense AI left a 2.5 million-record database of patient names, contact information and insurance details on an internet-facing instance with no authentication, demonstrating ongoing exposure of AI-pipeline data assets.


Mitigations:

Architectural layers (MAESTRO):