31.5M invoices, contracts, patient consent forms, and more exposed to the internet

A security researcher discovered a publicly accessible, non-password-protected ServiceBridge database containing nearly 2.7 TB (about 31.5 million) of sensitive documents — invoices, contracts, HIPAA patient consent forms, work orders, and partial payment details — spanning back to 2012; the exposure could enable invoice fraud, targeted phishing, and privacy breaches, the researcher notified the company and the database was closed, and there is no reported evidence of active exploitation in the write-up.