AlohaCare

The Vermont Office of the Attorney General reported a data breach involving AlohaCare on November 3, 2023. The breach occurred around May 31, 2023, due to a zero-day vulnerability in a file transfer tool, potentially exposing personal information such as names, addresses, dates of birth, and Social Security numbers. The number of affected individuals is currently unknown.

Source: https://ago.vermont.gov/document/2023-11-03-alohacare-data-breach-notice-consumers

TPRM report: https://www.rankiteo.com/company/aloha-care

"id": "alo106072425",
"linkid": "aloha-care",
"type": "Vulnerability",
"date": "5/2023",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'industry': 'Healthcare',
                        'name': 'AlohaCare',
                        'type': 'Healthcare'}],
 'attack_vector': 'Zero-day vulnerability in a file transfer tool',
 'data_breach': {'personally_identifiable_information': ['names',
                                                         'addresses',
                                                         'dates of birth',
                                                         'Social Security '
                                                         'numbers'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personal Information']},
 'date_detected': '2023-05-31',
 'date_publicly_disclosed': '2023-11-03',
 'description': 'The Vermont Office of the Attorney General reported a data '
                'breach involving AlohaCare on November 3, 2023. The breach '
                'occurred around May 31, 2023, due to a zero-day vulnerability '
                'in a file transfer tool, potentially exposing personal '
                'information such as names, addresses, dates of birth, and '
                'Social Security numbers. The number of affected individuals '
                'is currently unknown.',
 'impact': {'data_compromised': ['names',
                                 'addresses',
                                 'dates of birth',
                                 'Social Security numbers']},
 'references': [{'date_accessed': '2023-11-03',
                 'source': 'Vermont Office of the Attorney General'}],
 'title': 'AlohaCare Data Breach',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Zero-day vulnerability'}