Gladinet, GiaCare and Inc.: GiaCare Data Breach Lawsuit Investigation

GiaCare Data Breach Exposes Sensitive Personal Information of New Hampshire Resident

Shamis & Gentile P.A., a class action law firm specializing in data breach cases, is investigating a cybersecurity incident involving GiaCare, Inc., a Florida-based healthcare staffing and IT solutions provider. The breach, discovered on December 23, 2025, stemmed from a vulnerability in Gladinet CentreStack, a third-party file-sharing platform used by GiaCare.

While GiaCare’s internal systems remained uncompromised, an unauthorized party accessed and exfiltrated files from the CentreStack platform on December 6, 2025. The exposed data included names, driver’s license numbers, and Social Security numbers, affecting at least one New Hampshire resident.

GiaCare has notified impacted individuals and is offering one year of complimentary credit monitoring through Epiq – Privacy Solutions ID 3B, which includes three-bureau monitoring, fraud alerts, and $1 million in identity theft insurance. The firm is also facing potential legal action, with affected individuals encouraged to explore compensation claims for damages, including out-of-pocket expenses and future identity theft risks.

GiaCare serves healthcare organizations, government contracts, and military health systems, raising concerns about the broader implications of the breach. The incident underscores the risks associated with third-party vendor vulnerabilities in the healthcare sector.

Source: https://www.claimdepot.com/investigations/giacare-data-breach-2026

Gladinet cybersecurity rating report: https://www.rankiteo.com/company/gladinet

GiaCare cybersecurity rating report: https://www.rankiteo.com/company/giacareinc

"id": "GLAGIA1769454809",
"linkid": "gladinet, giacareinc",
"type": "Vulnerability",
"date": "12/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 'At least one New Hampshire '
                                              'resident',
                        'industry': 'Healthcare',
                        'location': 'Florida, USA',
                        'name': 'GiaCare, Inc.',
                        'type': 'Healthcare staffing and IT solutions '
                                'provider'}],
 'attack_vector': 'Third-party vendor vulnerability',
 'customer_advisories': 'One year of complimentary credit monitoring through '
                        'Epiq – Privacy Solutions ID 3B (three-bureau '
                        'monitoring, fraud alerts, and $1 million in identity '
                        'theft insurance)',
 'data_breach': {'data_exfiltration': 'Yes',
                 'personally_identifiable_information': 'Names, driver’s '
                                                        'license numbers, '
                                                        'Social Security '
                                                        'numbers',
                 'sensitivity_of_data': 'High (Social Security numbers, '
                                        'driver’s license numbers)',
                 'type_of_data_compromised': 'Personal Identifiable '
                                             'Information (PII)'},
 'date_detected': '2025-12-23',
 'description': 'A cybersecurity incident involving GiaCare, Inc., a '
                'Florida-based healthcare staffing and IT solutions provider, '
                'resulted in the exposure of sensitive personal information '
                'due to a vulnerability in Gladinet CentreStack, a third-party '
                'file-sharing platform. The breach affected at least one New '
                'Hampshire resident, with exposed data including names, '
                'driver’s license numbers, and Social Security numbers.',
 'impact': {'data_compromised': 'Names, driver’s license numbers, Social '
                                'Security numbers',
            'identity_theft_risk': 'High',
            'legal_liabilities': 'Potential legal action and compensation '
                                 'claims',
            'systems_affected': 'Gladinet CentreStack (third-party '
                                'file-sharing platform)'},
 'investigation_status': 'Under investigation',
 'lessons_learned': 'Risks associated with third-party vendor vulnerabilities '
                    'in the healthcare sector',
 'post_incident_analysis': {'root_causes': 'Vulnerability in third-party '
                                           'file-sharing platform (Gladinet '
                                           'CentreStack)'},
 'recommendations': 'Explore compensation claims for damages, including '
                    'out-of-pocket expenses and future identity theft risks; '
                    'consider enhanced third-party vendor security assessments',
 'references': [{'source': 'Shamis & Gentile P.A.'}],
 'regulatory_compliance': {'legal_actions': 'Potential class action lawsuit'},
 'response': {'communication_strategy': 'Notification to impacted individuals'},
 'title': 'GiaCare Data Breach Exposes Sensitive Personal Information of New '
          'Hampshire Resident',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Vulnerability in Gladinet CentreStack'}