CareCloud Investigates Potential Patient Data Exposure After Cyber Incident
Summary
CareCloud told the SEC that a March 16 cyber incident disrupted one electronic health record environment for about eight hours. The company is investigating whether patient or other data was accessed or exfiltrated; systems have been restored.
Key points
- CareCloud disclosed the incident in a March 27 SEC filing.
- Functionality and data access in one of CareCloud’s six electronic health record environments were affected for roughly eight hours.
- The investigation is ongoing; CareCloud has not determined whether patient information or other data was accessed or exfiltrated.
- CareCloud said the incident was limited to its CareCloud Health environment and did not affect its other platforms, divisions, systems, data, or environments.
- The company said affected systems have been restored and it believes the threat actor no longer has access.
- CareCloud assessed that the incident had no material impact at the time of filing; no ransomware group was known to have claimed responsibility.
Article Details
- Victim Organization
- CareCloud
- Incident Type
- Cybersecurity incident involving temporary network disruption and possible patient information compromise
- Data Types Exposed
- Patient information (potentially)
- Other data stored in the affected environment (potentially)
- Affected Records
- Unknown
- Affected Data Size
- Unknown
- Operational Impact
- Functionality and data access in one of CareCloud's six electronic health record environments were affected for roughly 8 hours. CareCloud said all affected systems were restored and assessed that the incident had no material impact.
- Ransom Or Extortion
- No known ransomware group had claimed responsibility at the time of writing. The article's discussion of possible leak-site listing and negotiations was speculative; no extortion was reported as confirmed.
- Claim Status
- unknown