Health Records, Medical Data, & Billing Exposed Despite Encryption, WAF, & HIPAA Safeguards

Company Description

A global telehealth platform exposed electronic health records, consultation transcripts, insurance claims, prescribing data, and billing information, leaving sensitive data at risk of breach, fines, and reputational loss.

Perfai Security's Role

Perfai Security deployed 20,840 autonomous tests with zero engineering lift. With 1,506 Design & 62 Security vulnerabilities found, the agents flagged, prioritized, and instantly remediated issues — reducing what would have taken months of manual effort.

Sensitive Data Exposures

• Specialists
  • PII
  • History
• Groups
• Family Members
• Interventions / Consultations
• Programs
• Users
  • Credentials
  • PII
  • History
  • Tasks
• Scheduled-Access

Testing Categories

• OWASP API Security Top-10 List
• OWASP Web Top-10 List
• Perfai Security Next-Gen Top-30 List
• OWASP Business Logic Top-10 List
• OWASP Mobile Top-10 List
• OWASP AI Agent Top-10 List
• RBAC