Paine notified ElasticSearch, which contacted the owner of the database. The information is no longer publicly accessible, but in a blog post, Paine said to the best of his knowledge, Steps to Recovery has not reached out to the patients. While 150,000 people is a relatively small data leak by today’s standards, exposing health records, especially those regarding addiction and with PII, is a serious mishap.