Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchPC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11In August 2024, security researcher Jeremiah Fowler reportedly found an unsecured ServiceBridge database containing about 31.5 million documents—rounded to 32 million in some headlines—and roughly 2 TB of data. The database was reportedly secured after disclosure. Public reporting does not establish that criminals downloaded the files, so this should be described as a serious database exposure, not a confirmed ransomware attack or proven data theft.
What happened
ServiceBridge is cloud-based field-service-management software used for scheduling, estimates, work orders, technician activity, invoicing, payments, customer information and field documentation. Its customers include businesses such as HVAC, plumbing, cleaning, landscaping, pest control, pool service, locksmithing and security installation companies. The company’s current website describes those capabilities at ServiceBridge.
As an Amazon Associate I earn from qualifying purchases.
According to coverage published on August 27, 2024, Fowler discovered a database that appeared to lack adequate access protection. Reports attributed to the discovery described approximately 31.5 million documents, with records reportedly dating back to 2012. A breach-digest report put the volume at about 2 TB. Those figures are reported estimates, not an independently verified inventory.
The database was reportedly secured after the issue was disclosed. The public reporting available does not provide a verified exposure window, a customer-by-customer impact list or a forensic conclusion about whether anyone copied the data.
#1 Best Overall
What information was reportedly exposed?
The reported contents were a mixture of operational, financial, commercial and potentially sensitive personal documents. They included:
- Contracts and service agreements
- Work orders, estimates and proposals
- Invoices and inspection records
- Business agreements and PDF attachments
- Customer and company information
- Partial credit-card numbers
- HIPAA-related consent forms
That list describes document types found in the database; it does not mean every file contained every category of information. ServiceBridge’s documentation shows that its reports can combine customer, location, asset, billing, job, invoice and custom-field data, which helps explain why a field-service system may hold such a broad mix of records. See the Service Agreements Report FAQ.
Partial card data is not a full card-number leak
Reports referred to partial credit-card numbers, not complete payment-card credentials. Partial numbers can add context to phishing or fraud when paired with names, invoices, addresses or transaction details, but they are not equivalent to an exposed full card number, security code and expiration date. The actual payment risk depends on what other fields were present and whether payment information was masked or tokenized.
HIPAA forms are not automatically medical records
The reported presence of HIPAA consent or authorization forms is important, but it does not prove that complete medical records were exposed. A consent form may contain sensitive information, yet it is distinct from a clinical record, and its presence alone does not establish a HIPAA violation or a regulator’s finding.
Who may be affected?
The records appear to have related to many ServiceBridge customers and the people represented in their files. Secondary reporting described organizations or records connected with the United States, Canada, the United Kingdom and Europe. That geographic description is not a formal customer-impact statement, and it does not mean every customer in those regions was affected.
No verified public count of affected businesses, customers, individuals or tenants was identified. Document volume cannot be converted into a company count: one large contractor could generate thousands of files, while a single document could mention multiple organizations or customers.
Was the data stolen?
Not on the evidence publicly available. An unsecured database means an unauthorized person could potentially view or download records. It does not prove that anyone did so.
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Repair Windows errors before they cause bigger problems3Scan for outdated or missing drivers - takes under a minute| Term | Meaning in this incident |
|---|---|
| Exposure | Data was accessible to an unauthorized audience. |
| Misconfiguration | A security setting allowed broader access than intended. |
| Intrusion | An attacker entered or compromised a system; this has not been established publicly. |
| Exfiltration | Data was copied or removed; no public confirmation was identified. |
| Fraud or identity theft | Downstream misuse; no documented consequence was established in the available coverage. |
“Leak” is understandable headline language, but “exposed database” is more precise unless investigators confirm that files were copied or republished. The available accounts support a cloud or database access-control failure, not a confirmed ransomware operation.
What did ServiceBridge do?
Reports indicate that the database was secured after disclosure. The public record reviewed for this article does not verify the exact discovery or remediation dates, the length of exposure, a detailed incident-response report, customer-notification scope, regulatory notifications, confirmed downloads or deletion and rotation of affected data.
ServiceBridge’s website continues to market the product and links to general privacy, GDPR and security information. Those general pages are not, by themselves, a statement about this 2024 incident. Customers searching older notices may also encounter the company’s explanation that ServiceBridge was renamed GPS Insight Field Service Management in 2020; the help-center notice is at ServiceBridge name-change notice.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Practical risks for businesses and individuals
The following are plausible consequences of the reported data categories, not documented outcomes of this exposure:
- Invoice fraud: Genuine invoice details can make requests to change bank-account information look credible.
- Targeted phishing: Work orders, service dates, addresses and technician names can support convincing impersonation.
- Business-email compromise: Contracts, proposals and service terms may help criminals pose as vendors or customers.
- Commercial confidentiality: Pricing, agreements and customer lists may reveal competitive information.
- Physical-security concerns: Access notes, alarm details or inspection information could identify vulnerable premises.
- Privacy and health risk: Customer, employee or HIPAA-related documents may contain sensitive personal information.
- Payment-related social engineering: Partial card data can reinforce a scam, although it is not full card credentials.
What ServiceBridge customers should do
- Contact ServiceBridge through an authenticated support or account channel. Ask whether your tenant, documents or attachments were included; request the exposure window, an incident reference and any available access-log findings. Keep communications in your account rather than relying on an unsolicited email.
- Inventory the data you stored. Check contracts, customer names and addresses, work orders, invoices, payment-related fields, technician details, inspection attachments, HIPAA-related forms and exports sent to other systems.
- Rotate credentials and tokens where appropriate. Change ServiceBridge administrator passwords and rotate API keys, integration credentials, shared-mailbox passwords and any remote-access credentials that appear in exposed documents.
- Review payment exposure. Determine whether your organization ever stored full card data. Ask your payment processor whether tokens, merchant identifiers or transaction records require monitoring. Do not assume that a partial number alone enables ordinary card-not-present fraud.
- Prepare staff and customer communications. Warn employees about messages that quote real jobs or invoices. Require an independent callback or second approval for payment-detail changes, and explain how legitimate notices from your business will be delivered.
- Preserve evidence. Save notices, support tickets, affected-file lists, access logs and the dates of discovery, notification and remediation.
- Assess legal obligations. U.S. notification rules vary by state and by the information involved. HIPAA duties depend on whether protected health information was involved and on each entity’s role; Canadian, U.K. and European requirements may also apply. Obtain advice from qualified breach counsel or a privacy professional for your jurisdictions.
What remains unknown
- How long the database was accessible
- How many ServiceBridge tenants and businesses were represented
- Whether anyone downloaded or indexed the documents
- Which customers, individuals or jurisdictions require notification
- Whether regulators received reports
- Whether any fraud, identity theft or other misuse resulted
Those unanswered questions are why the incident should not be presented as either harmless or proven theft. It was a substantial exposure of business documents, but the public evidence does not establish exfiltration.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
