An ElasticSearch database exposed to the Internet without any form of authentication. The data appears to cover patient data from mid 2016 – late 2018, and amounts to roughly 4.9 million rows of data. Based on the name of the database and additional information in the database it appears this was patient data at an addiction treatment center located in Levittown, PA. The treatment center has yet to reply to any inquiries regarding this leak of their PII. It is unclear if Steps To Recovery took this action, or if someone may have been running this database on their behalf.”]
Source: https://rainbowtabl.es/2019/04/19/steps-to-recovery-recovery-addiction-treatment-center-leak/