All security briefings

Access after employment Regulatory complaint

Cerebral: access to medical records outlasted employment

Incident
May–December 2021 (access issue described here)
Source report

What was reported

In its April 2024 complaint, the FTC alleged that Cerebral failed to block former employees from accessing electronic medical records between May and December 2021. It also alleged that the company failed to ensure providers accessed only their own patients’ records. These were among broader privacy and security allegations.

Read the report from Federal Trade Commission

Our perspective

Our reading: A permission needs an owner, a scope and an end. For AI tools, the same question applies when a project ends or a team member leaves: which future requests must stop?

Try Vivendur in action

Limits of this connection

These are allegations described in the linked complaint announcement, not findings from an AI evaluation. Ending future access cannot recall information already copied.