嗯，用户让我总结一下这篇文章的内容，控制在一百个字以内。首先，我需要通读文章，抓住关键点。文章讲的是CareCloud公司发生了数据泄露事件，导致网络中断了大约八小时。黑客是在3月16日入侵的，影响了其中一个电子健康记录环境。公司已经报告给了SEC，并且聘请了外部团队进行调查和加强安全措施。目前还不清楚有多少人受影响，但其他系统没有问题。 接下来，我要把这些信息浓缩到100字以内。要包括事件的时间、影响范围、公司的应对措施以及当前状况。可能需要省略一些细节，比如公司是上市公司、提供哪些服务这些可能不需要。 然后，检查是否有重复的信息或者可以合并的句子。比如，“网络中断”和“部分影响功能和数据访问”可以合并成“导致网络中断约8小时”。同时，“聘请外部团队进行调查”可以简化为“聘请外部团队调查”。 最后，确保语言简洁明了，不使用复杂的词汇。这样用户就能快速理解事件的主要内容和结果。 </think> 医疗IT公司CareCloud披露一起数据泄露事件，黑客于3月16日入侵其IT系统，导致网络中断约8小时，并影响其中一个电子健康记录环境。公司已聘请外部团队调查并加强安全措施。目前尚不清楚受影响人数及数据泄露范围。 2026-3-30 21:45:16 Author: www.bleepingcomputer.com(查看原文) 阅读量:5 收藏
Healthcare IT firm CareCloud has disclosed a data breach incident that exposed sensitive data and caused a network disruption lasting approximately eight hours.
The New Jersey-based company said in a filing with the U.S. Securities and Exchange Commission (SEC) that the intrusion occurred on March 16 when hackers accessed its IT infrastructure.
“On March 16, 2026, CareCloud, Inc. experienced a temporary network disruption in its CareCloud Health division that partially impacted the functionality and data access to 1 of its 6 electronic health record environments for approximately 8 hours until the Company fully restored all functionality and data access during that evening,” the company says in the SEC filing.
After detecting the intrusion, CareCloud said that it reported the issue to "its cybersecurity carrier and engaged a leading cyber response advisory team, which is part of a Big Four accounting firm, to perform external cybersecurity work and to assist with securing the environment, as well as to conduct a comprehensive IT forensic investigation to determine the nature and scope of this incident.”
CareCloud is a publicly traded healthcare IT firm that offers software-as-a-service (SaaS), revenue cycle management, practice management, patient experience management, and electronic health record (EHR) solutions.
Although the unauthorized data access was limited in scope, based on the investigation's findings so far, CareCloud confirmed that one of its six environments, which holds patient health records for its customers, was compromised.
Currently, it is unclear how many individuals are impacted. The company explained that an investigation has started to determine which types of data were accessed and/or exfiltrated.
BleepingComputer has reached out to CareCloud for a comment on the matter, and we will update this post when we receive a statement.
Meanwhile, CareCloud underlined that there’s no impact on other platforms, divisions, systems, or environments, and assured that the attacker no longer has access to its database.
All affected systems have been fully restored, and the company is working with external cybersecurity experts to strengthen its security measures to prevent similar incidents from recurring.
BleepingComputer could not find a ransomware group taking credit for the attack on CareCloud.
Automated Pentesting Covers Only 1 of 6 Surfaces.
Automated pentesting proves the path exists. BAS proves whether your controls stop it. Most teams run one without the other.
This whitepaper maps six validation surfaces, shows where coverage ends, and provides practitioners with three diagnostic questions for any tool evaluation.
如有侵权请联系:admin#unsafe.sh