MEDIUMVulnerability
Global

EHR Vendor Notifying 3.8 Million Patients of Data Theft Hack

·Source: Bank Info Security

Updated:

Executive Summary

CareCloud Said Compromise Involved One of Its AWS Cloud Environments CareCloud, a provider of cloud-based, artificial intelligence-powered electronic health records, is notifying nearly 3.8 million individuals that their perso

Analysis

CareCloud Said Compromise Involved One of Its AWS Cloud Environments CareCloud, a provider of cloud-based, artificial intelligence-powered electronic health records, is notifying nearly 3.8 million individuals that their personal and health information was potentially stolen in a March hacking incident involving one of its Amazon Web Services environments.

Indicators of Compromise (2)

URL (1)
https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/ehr-vendor-notifying-nearly-38m-data-theft-hack-image_small-9-a-32609.jpg
VirusTotalURLhaus
Domain (1)
ismg-cdn.nyc3.cdn.digitaloceanspaces.com
VirusTotalURLhaus
Source Attribution

Originally published by Bank Info Security on Aug 19, 2026.

Related Threats

MEDIUMVulnerability

Postal Service moves to finalize mail ballot regs before SCOTUS ruling

The rules have already been rejected by multiple state courts, but the Trump administration said it’s preparing in case of a favorable Supreme Court decision. The post Postal Service moves to finalize mail ballot regs before SCOTUS ruling appeared first on CyberScoop .

CyberScoop
MEDIUMVulnerability

Vulnerability Analysis of CVE-2025-22226: Information Disclosure Due to OOB Read in VMware’s HGFS

[object Object]

CVE-2025-22226
r/blueteamsec
MEDIUMVulnerability

TikTok Agrees to $400 Million Settlement in U.S. Child Privacy Lawsuit

The U.S. Department of Justice (DoJ) announced on Friday that ByteDance-owned TikTok will pay $400 million to settle a 2024 lawsuit accusing the company of violating child privacy laws in the country. As part of the settlement, the social media platform will pay $300 million immediately, and an additional $100 million "upon entry of an order vacating a prior consent decree entered against

The Hacker News