CyberNew CyberNew
Data Breaches & Leaks The Record 1 month ago

Electronic health record company CareCloud says 3.7 million people affected by breach

CN
CyberNew Threat Research Desk
• Original Reporting: The Record
CyberNew Threat Intel Assessment
Assessed Severity: HIGH
Impacted Surface
Cloud & Distributed Infrastructure
Intelligence Sector
Data Breaches & Leaks

Analyst Takeaway

"Image: CareCloud/Unsplash Electronic health record company CareCloud says 3.7 million people affected by breach One of the largest hospital technology providers told federal regulators that 3.7 million people were impacted by a data breach in March. Healthcare software firm CareCloud filed documents with the Department of Health and Human Services confirming that 3,756,469 people had information..."

Recommended Defense & Mitigation

  • Access Review: Audit administrative roles, enforce phishing-resistant MFA, and review privilege escalations.
  • Credential Rotation: Rotate high-privilege service credentials and tokens associated with impacted services.
Curated & Verified by CyberNew Threat Intelligence Desk Standard Defense Framework (NIST / MITRE ATT&CK)
carecloud
Image: CareCloud/Unsplash

Electronic health record company CareCloud says 3.7 million people affected by breach

One of the largest hospital technology providers told federal regulators that 3.7 million people were impacted by a data breach in March.

Healthcare software firm CareCloud filed documents with the Department of Health and Human Services confirming that 3,756,469 people had information leaked after a hacker spent eight hours in one of the company’s electronic health record environments.

In breach notification letters to victims filed in multiple states, CareCloud said a hacker had access to one of their AWS environments from March 10 to March 16 and was able to exfiltrate data. 

Source Verification & Original Intelligence

This threat report was reviewed by CyberNew analysts and cross-referenced with primary security disclosures from The Record.

Primary Advisory →