Home / Technology / CareCloud Data Breach Exposes Millions of Medical Records
CareCloud Data Breach Exposes Millions of Medical Records
31 Jul
Summary
- Nearly 350,000 people affected by CareCloud cyberattack.
- Hackers accessed patient data for at least six days.
- Stolen data includes SSNs, financial, and medical information.
Hundreds of thousands of individuals are being notified of a data breach affecting CareCloud, a U.S. health tech company. The cyberattack, which occurred earlier this year, has impacted at least 345,000 people. Hackers accessed one of CareCloud's electronic health record data stores for a six-day period, from March 10 to March 16.
The breach involved the exfiltration of highly sensitive personal and medical information. This includes names, postal addresses, Social Security numbers, and government-issued identification details like passports and driver's licenses. Furthermore, financial data, such as bank account information and payment card numbers, along with extensive medical and health-related records, were compromised.
CareCloud, based in New Jersey, manages patient records for over 45,000 providers nationwide, including various medical practices, hospitals, and doctors' offices. The company disclosed the incident to state attorneys general in New Hampshire, Massachusetts, and Texas, among others. This incident is part of a recent surge in cyberattacks targeting the healthcare sector, with other providers like TriZetto and NYC Health + Hospitals also experiencing significant breaches.
