CareCloud Reports Breach Affecting 3.76 Million People
Summary
CareCloud reported that a hacker accessed an AWS electronic health record environment in March and exfiltrated data affecting 3,756,469 people, including Social Security numbers, payment card details, medical records and insurance information.
Key points
- CareCloud reported that 3,756,469 people were affected by the breach.
- The company said a hacker accessed one of its AWS environments from March 10 to March 16, with eight hours of access.
- Exposed information included Social Security numbers, ID numbers, payment card details, medical records and insurance data.
- CareCloud said it notified law enforcement and the SEC, and filed breach notifications to affected individuals and regulators.
- No hacking group claimed responsibility for the incident.
Article Details
- Victim Organization
- CareCloud
- Incident Type
- Data breach involving unauthorized access to an electronic health record environment and data exfiltration
- Data Types Exposed
- Personal information
- Social Security numbers
- ID numbers
- Credit and debit card information
- Medical information
- Insurance data
- Affected Records
- 3,756,469 people
- Operational Impact
- A hacker accessed one of CareCloud's AWS environments and exfiltrated data. No service disruption or operational outage was reported.
- Ransom Or Extortion
- No hacking group took credit for the incident. Ransom or extortion activity was not reported.
- Claim Status
- confirmed
Vendors
Amazon Web ServicesCareCloud reported that a March data breach affected 3,756,469 people after a hacker accessed one of its AWS electronic health record environments for eight hours and exfiltrated sensitive data.CareCloudCareCloud reported that a March data breach affected 3,756,469 people after a hacker accessed one of its AWS electronic health record environments for eight hours and exfiltrated sensitive data.