[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fOBtpNnqI9v_XaLHfvd5e3f--AIwZv17VRqg3mSDD3VE":3},{"article":4,"iocs":41,"watch_terms":42,"solutions":43,"lesson":130},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":23,"category":24,"article_tags":28},"5b90134c-4693-4a7c-bd36-0e62cb5dd26c","CareCloud Data Breach Impacts Over 350,000","carecloud-data-breach-impacts-over-350-000-96237d","In March 2026, hackers stole personal, financial, and medical information from the company’s AWS environment. The post CareCloud Data Breach Impacts Over 350,000 appeared first on SecurityWeek.","Healthcare IT company CareCloud has disclosed a data breach impacting at least 350,000 individuals. Hackers accessed an AWS environment between March 10 and March 16, 2026, exfiltrating personal, financial, and medical information. The compromised data includes sensitive details like Social Security numbers, financial account numbers, and medical records. CareCloud is offering affected individuals 24 months of free identity theft protection services.","CareCloud data breach exposes personal, financial, and medical info of over 350,000 individuals.","https:\u002F\u002Fwww.securityweek.com\u002Fcarecloud-data-breach-impacts-over-350000\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2025\u002F07\u002Fdata-breach-healthcare-medical.jpg","2026-07-31T07:51:43+00:00","2026-07-31T08:00:09.475554+00:00",8,[17,20],{"name":18,"type":19},"AWS","product",{"name":21,"type":22},"CareCloud","vendor","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":23,"icon":25,"name":26,"slug":27},null,"Breaches","breaches",[29,31,36],{"category":30},{"id":23,"icon":25,"name":26,"slug":27},{"category":32},{"id":33,"icon":25,"name":34,"slug":35},"614132b8-5837-4952-b8b5-c6c9a32a1d85","Privacy","privacy",{"category":37},{"id":38,"icon":25,"name":39,"slug":40},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[21,18],{"controls":44,"vendors":129},[45,74,100],{"slug":46,"name":47,"problem":48,"products":49},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",[50,58,66],{"vendor_slug":51,"vendor_name":52,"vendor_logo":53,"product_slug":54,"product_name":55,"url":56,"description":57},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","defender-for-identity","Microsoft Defender for Identity","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fsiem-and-xdr\u002Fmicrosoft-defender-for-identity","Detects attacks against on-premises Active Directory and hybrid identities.",{"vendor_slug":59,"vendor_name":60,"vendor_logo":61,"product_slug":62,"product_name":63,"url":64,"description":65},"huntress","Huntress","\u002Fvendor-logos\u002Fhuntress.png","managed-itdr","Huntress Managed ITDR","https:\u002F\u002Fwww.huntress.com\u002Fplatform\u002Fmanaged-itdr","Managed detection of suspicious activity in Microsoft 365 and Entra ID.",{"vendor_slug":67,"vendor_name":68,"vendor_logo":69,"product_slug":70,"product_name":71,"url":72,"description":73},"acalvio","Acalvio","\u002Fvendor-logos\u002Facalvio.png","shadowplex-identity-protection","ShadowPlex Identity Protection","https:\u002F\u002Fwww.acalvio.com\u002Fproducts\u002Fidentity-protection\u002F","Decoy accounts and credentials that expose identity attacks and credential misuse early.",{"slug":75,"name":76,"problem":77,"products":78},"cloud-security-posture","Cloud security posture management (CSPM and CNAPP)","Misconfigured cloud storage and over-permissive roles get caught before they leak.",[79,87,92],{"vendor_slug":80,"vendor_name":81,"vendor_logo":82,"product_slug":83,"product_name":84,"url":85,"description":86},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","cortex-cloud","Cortex Cloud","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fcortex\u002Fcloud","Cloud security platform covering posture management and runtime protection.",{"vendor_slug":51,"vendor_name":52,"vendor_logo":53,"product_slug":88,"product_name":89,"url":90,"description":91},"defender-for-cloud","Microsoft Defender for Cloud","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fcloud-security\u002Fmicrosoft-defender-cloud","Cloud posture management and workload protection for Azure, AWS and Google Cloud.",{"vendor_slug":93,"vendor_name":94,"vendor_logo":95,"product_slug":96,"product_name":97,"url":98,"description":99},"wiz","Wiz","\u002Fvendor-logos\u002Fwiz.png","wiz-cloud","Wiz Cloud","https:\u002F\u002Fwww.wiz.io\u002Fplatform\u002Fwiz-cloud","Agentless cloud security posture and attack path analysis across major cloud providers.",{"slug":101,"name":102,"problem":103,"products":104},"encryption-key-management","Encryption and key management","Stolen data stays unreadable, and the keys stay under your control.",[105,113,121],{"vendor_slug":106,"vendor_name":107,"vendor_logo":108,"product_slug":109,"product_name":110,"url":111,"description":112},"hashicorp","HashiCorp","\u002Fvendor-logos\u002Fhashicorp.png","vault","HashiCorp Vault","https:\u002F\u002Fwww.hashicorp.com\u002Fen\u002Fproducts\u002Fvault","Secrets management with short-lived credentials and encryption as a service.",{"vendor_slug":114,"vendor_name":115,"vendor_logo":116,"product_slug":117,"product_name":118,"url":119,"description":120},"utimaco","Utimaco","\u002Fvendor-logos\u002Futimaco.png","utimaco-hsm","Utimaco General Purpose HSM","https:\u002F\u002Futimaco.com\u002Fdata-protection\u002Fgp-hsm","Hardware security modules for key generation, storage and cryptographic operations.",{"vendor_slug":122,"vendor_name":123,"vendor_logo":124,"product_slug":125,"product_name":126,"url":127,"description":128},"thales","Thales","\u002Fvendor-logos\u002Fthales.png","ciphertrust","CipherTrust Data Security Platform","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fdata-security-platform","Data discovery, encryption and central key management across on-premises and cloud.",[],{"slug":131,"title":132,"body":133,"framework_refs":134,"framework_notes":148},"carecloud-aws-breach-exposes-350000-patients-sensitive-data","CareCloud AWS Breach Exposes 350,000 Patients' Sensitive Data","Hackers gained unauthorized access to CareCloud's AWS environment for nearly a week, exfiltrating highly sensitive personal, financial, and medical records belonging to over 350,000 individuals. The breach highlights the critical risks of insufficient cloud access controls and misconfigured AWS environments that store regulated healthcare data. Healthcare organizations are prime targets because they hold a trove of high-value data — including Social Security numbers and medical records — that commands premium prices on criminal markets. The week-long dwell time before detection suggests gaps in real-time monitoring and alerting, compounding the severity of the exposure. Under HIPAA, such breaches carry significant legal and financial consequences beyond the reputational damage already incurred.",[135,136,137,138,139,140,141,142,143,144,145,146,147],"NIST SP 800-53 AC-2 (Account Management)","NIST SP 800-53 AC-6 (Least Privilege)","NIST SP 800-53 AU-6 (Audit Review & Reporting)","NIST SP 800-53 SC-28 (Protection of Information at Rest)","CIS Control 5: Account Management","CIS Control 6: Access Control Management","CIS Control 8: Audit Log Management","CIS Control 3: Data Protection","HIPAA Security Rule § 164.312(a)(1) – Access Control","HIPAA Security Rule § 164.312(b) – Audit Controls","HIPAA Breach Notification Rule § 164.400–414","AWS Well-Architected Framework – Security Pillar (Identity & Access Management)","NIST CSF DE.CM-1 (Continuous Monitoring)",{}]