A RIZAP employee uploaded customer data to a personal AI service. The data included names, emails, and health details.
RIZAP says no third party accessed or used it.
They reported to regulators and will contact affected customers.
What happened
Fitness company RIZAP reported on September 3 that an employee mistakenly uploaded customer information to an external generative AI service used for personal purposes during work on data for the government's specific health guidance program.
Why it matters
The data included insurance symbols, email addresses, names, birth dates, genders, partial addresses and phone numbers, plus sensitive personal details like support type and disease info. RIZAP said it confirmed no third-party viewing or use for AI training, but is still checking if the service provider's staff could have seen the data.
What to watch
RIZAP has notified the Personal Information Protection Commission and will contact affected individuals. It reiterated an internal ban on unauthorized generative AI services to prevent recurrence.
Ask the AI about this article →
This incident highlights risks when employees use personal AI tools for work tasks. RIZAP's data was part of a national health checkup and guidance system, making the breach sensitive. The company's confirmation that no third party saw the data or used it for training is a key mitigation, but ongoing checks about the provider's access suggest uncertainty remains.
RIZAP's response—reporting to the commission and notifying affected individuals—shows standard procedure for such leaks. The company's reminder about its ban on unauthorized AI services indicates a focus on internal policy enforcement. However, the fact that an employee used a personal service for work suggests a gap between policy and practice. This could drive other firms to reassess their own AI usage guidelines.
For example, today's edition would include:
AI-summarized, only the topics you pick — one digest a day via Email, Slack, or Discord.
Free · takes 30 seconds · unsubscribe anytimeWhat is AIToday? →
Ask AI anything about this article. Q&As are published on this page for other readers too.
Infosys, a founding partner of CrowdStrike's Project QuiltWorks, is bringing enterprise context to CrowdStrike…
Cisco has announced a target to have zero engineers writing code by the end of October
OpenAI's latest model, Astra, can do more thinking off the scratchpad, according to Transformer
Cecilia Ziniti, former general counsel at Replit, left the company in November 2023 and founded GC AI, an AI s…
Governments and companies outside the US and China are building local AI models to avoid relying on foreign sy…
Users report Instagram's "AI Content" label is wrongly appearing on images they edited with tools like Canva's…
