Data Breach Alert: Patient Information Compromised by Hackers at CareCloud Healthcare Tech Firm

CareCloud, a prominent healthcare IT company, recently revealed a security breach that led to the exposure of sensitive data and a network disruption lasting around eight hours. The incident, which took place on March 16, involved hackers gaining access to CareCloud’s IT infrastructure.

According to a filing with the U.S. Securities and Exchange Commission (SEC), CareCloud’s CareCloud Health division experienced a temporary network disruption that affected one of its six electronic health record environments. The disruption lasted for approximately eight hours until the company fully restored functionality and data access.

Upon discovering the intrusion, CareCloud promptly reported the issue to its cybersecurity provider and enlisted a leading cyber response advisory team from a Big Four accounting firm to address the breach. The team conducted external cybersecurity work and initiated a comprehensive IT forensic investigation to determine the extent and nature of the incident.

As a publicly traded healthcare IT firm, CareCloud offers a range of solutions, including software-as-a-service (SaaS), revenue cycle management, practice management, patient experience management, and electronic health record (EHR) services.

While the unauthorized data access was limited, CareCloud confirmed that one of its environments containing patient health records was compromised. The company is currently investigating the incident to assess the impact and identify the types of data accessed or exfiltrated.

Although the exact number of affected individuals is unknown, CareCloud emphasized that the breach did not extend to other platforms, divisions, systems, or environments. The company assured that the attacker no longer has access to its database and that all affected systems have been fully restored.

CareCloud is collaborating with external cybersecurity experts to enhance its security measures and prevent similar incidents in the future. Despite the breach, there have been no claims from any ransomware group taking credit for the attack on CareCloud.

Automated pentesting and Breach and Attack Simulation (BAS) are crucial components of cybersecurity. This whitepaper explores six validation surfaces, identifies coverage gaps, and offers three key questions for evaluating cybersecurity tools.

Get Your Copy Now