CareSource

The Vermont Office of the Attorney General reported on August 25, 2023, that CareSource experienced a data breach on May 31, 2023, due to a hack of MOVEit software. The breach may have compromised protected health information, including names, Social Security numbers, and medical details.

Source: https://ago.vermont.gov/document/2023-08-25-caresource-progress-software-moveit-data-breach-notice-consumers

TPRM report: https://www.rankiteo.com/company/caresource

"id": "car136072825",
"linkid": "caresource",
"type": "Breach",
"date": "5/2023",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"

{'affected_entities': [{'industry': 'Healthcare',
                        'name': 'CareSource',
                        'type': 'Healthcare'}],
 'attack_vector': 'Hack of MOVEit software',
 'data_breach': {'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['names',
                                              'Social Security numbers',
                                              'medical details']},
 'date_detected': '2023-05-31',
 'date_publicly_disclosed': '2023-08-25',
 'description': 'The Vermont Office of the Attorney General reported on August '
                '25, 2023, that CareSource experienced a data breach on May '
                '31, 2023, due to a hack of MOVEit software. The breach may '
                'have compromised protected health information, including '
                'names, Social Security numbers, and medical details.',
 'impact': {'data_compromised': ['names',
                                 'Social Security numbers',
                                 'medical details']},
 'references': [{'date_accessed': '2023-08-25',
                 'source': 'Vermont Office of the Attorney General'}],
 'title': 'CareSource Data Breach',
 'type': 'Data Breach',
 'vulnerability_exploited': 'MOVEit software vulnerability'}