ZeroHour
Victim

CareCloud

0 mentions in 7 days · 3 in 30 days · 3 total · first seen · last

Timeline

Health data of more than 9.5 million people leaked from Aesto record system

Health data firm Aesto reported a breach affecting over 9.5 million people after hackers accessed its AWS infrastructure between December 2 and 18.

Alabama-based healthcare data company Aesto notified the Department of Health and Human Services that more than 9.5 million people had sensitive information leaked in a December cyberattack, after previously warning customers in June without disclosing scope. Attackers broke into the company's Amazon Web Services infrastructure between December 2 and December 18, stealing names, Social Security numbers, medical information, driver's license numbers, financial account numbers, and health insurance data. Aesto provides data migration and archiving services for medical facilities, and at least 30 healthcare organizations were affected, with breach notices filed for customers including Together Women's Health. Related healthcare incidents disclosed this year include Baylor Genetics (2.8 million people), CareCloud (3.7 million), and recent attacks at McKesson, Nutex, Paylogix, and Park Dental Partners.

The Record · 13d agoData breach

Canada’s Hospital for Sick Children attacked by cybercriminals again as employee data stolen

Canada's Hospital for Sick Children reported a data theft incident exposing current and former employee data via a third-party application.

The Hospital for Sick Children (SickKids), Canada's largest pediatric health center, disclosed that hackers stole personal information of current and former employees, job applicants, and SickKids Foundation staff, likely through a third-party software application. The attack briefly took down the hospital's careers website but did not involve clinical systems or patient information. Affected individuals were notified and offered two years of credit monitoring. The hospital was previously hit by ransomware in 2022.

The Record · 25d agoData breach in the wild

Electronic health record company CareCloud says 3.7 million people affected by breach

Healthcare software firm CareCloud reported a breach affecting 3,756,469 people after a hacker spent eight hours in an AWS EHR environment.

CareCloud disclosed to HHS that a hacker accessed one of its AWS environments from March 10 to March 16 and exfiltrated data within an eight-hour window in its electronic health record environment. Stolen data includes Social Security numbers, ID numbers, credit and debit card details, medical information, and insurance data. The company serves more than 45,000 providers and reported the incident to the SEC on March 24. No hacking group has claimed responsibility.

The Record · 27d agoData breach in the wild