WCF—Turn off includeExceptionsDetailsInFaults attribute
Make sure that the includeExceptionsDetailsInFaults attribute is turned off (set to False) for all the behaviors. This attribute should be turned on (set to True) for debugging purposes only.
<serviceDebug includeExceptionDetailInFaults="False" />