Electronic health record company CareCloud says 3.7 million people affected by breach
Healthcare software firm CareCloud reported a breach affecting 3,756,469 people after a hacker spent eight hours in an AWS EHR environment.
CareCloud disclosed to HHS that a hacker accessed one of its AWS environments from March 10 to March 16 and exfiltrated data within an eight-hour window in its electronic health record environment. Stolen data includes Social Security numbers, ID numbers, credit and debit card details, medical information, and insurance data. The company serves more than 45,000 providers and reported the incident to the SEC on March 24. No hacking group has claimed responsibility.
- 3,756,469 individuals affected per HHS filing
- Hacker spent eight hours in one EHR environment
- Data included SSNs, card details, and medical records
- CareCloud disclosed to SEC on March 24
- ATT&CK
- T1190 Exploit Public-Facing ApplicationT1530 Data from Cloud RepositoryT1005 Data from Local System
- Vendors
- CareCloud
- Products
- CareCloud EHR
- Victims
- CareCloud
- Countries
- United States
From the original article
1 min read at therecord.media
One of the largest hospital technology providers told federal regulators that 3. 7 million people were impacted by a data breach in March. Healthcare software firm CareCloud filed documents with the Department of Health and Human Services confirming that 3,756,469 people had information leaked after a hacker spent eight hours in one of the company’s electronic health record environments.
therecord.media
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.