CareTree reports data breach, affecting patient and caretaker data in their platform
Learn More
CareTree, Inc., a software company from Chicago with a focus on care management and patient advocacy, reported a data breach after discovering unauthorized access to their platform, identified initially on August 16, 2023, as unusual platform activity.
CareTree engaged external data security experts to assist in the investigation and worked closely with law enforcement to secure their platform and assess the impact. By October 13, 2023, CareTree had completed a review of the compromised files to identify the nature of the leaked information and the specific individuals affected by this incident.
Further investigation revealed that the breach occurred on July 21, 2023, allowing unauthorized access to sensitive personal information of consumers.
The compromised data included a range of personally identifiable information, such as:
- names,
- addresses,
- driver’s license numbers,
- Social Security numbers,
- financial account details,
- dates of birth,
- medical records,
- health insurance information.
No details are disclosed about the nature of the attack or the number of affected individuals.
Following the conclusion of their investigation, CareTree commenced issuing notification letters to all individuals whose data was involved in the breach.