The Port Nobody Remembered Opening

A private clinic in Budapest had its video recorder installed six years earlier by a technician who left the company shortly after, and no one on the current staff had ever logged into the device or knew its configuration existed.

During an unrelated network upgrade, AION's engineers discovered the recorder was still exposing a remote-access port directly to the open internet, a setting the original installer had likely enabled for convenience and simply never disabled. The clinic had no way of knowing whether that exposure had ever been exploited, and given that the recorder held months of footage from treatment areas and a records-room corridor, the discovery raised real questions about patient data exposure the clinic's director hadn't previously had reason to ask. She wanted it resolved immediately and wanted assurance it wouldn't happen again.

AION closed the exposed port the same day it was discovered, then migrated the clinic's entire video system onto an isolated, access-controlled network segment with no direct internet-facing pathway at all. Remote viewing for authorized staff was rebuilt through an encrypted connection requiring individual authentication, and a documented network diagram was left with the clinic so any future technician would understand exactly what existed and why.

The director now has a written record of the clinic's network security posture for the first time, something she could point to for any future compliance review. AION continues to monitor the network under a standing service agreement, specifically watching for exactly this kind of legacy misconfiguration.