CareTree
bd_44a69674e55b338c · schema v1 · pii pii-v1
Full breach record for CareTree →CareTree, Inc. disclosed a cybersecurity incident affecting its patient care platform. Unauthorized access occurred on July 21, 2023, and was discovered by CareTree on August 16, 2023. The breach potentially exposed personal information, including names and government identifiers (SSN), of caretaker professionals and patients. CareTree notified law enforcement, implemented additional security measures, and offered credit monitoring services to affected individuals. Notifications were sent in late 2023.
J jump to incidentP pin to compareR raw source
Incident timeline
Jul 21, 2023
Begins
Aug 16, 2023
Discovered
Dec 27, 2023
Filed
vs. sector median
on median
Linked disclosures
Why this link?Regulatory filings (9) · sorted by filing gap
- Montana State AGbd_446a50c00a9569582023-12-27Verified
- Vermont State AGbd_d3e5a7ef13ce1b8b2023-12-27Verified
- New Hampshire State AGbd_97d6f0b94f2157582024-01-12 · +16dVerified
- California State AGbd_727e34824e5007c92023-12-11 · +16dVerified
Show 5 more filings ↓Show fewer ↑up to 49d gap
- Maine State AGbd_ab9056e59a6339012023-12-11 · +16dVerified
- New Hampshire State AGbd_1f0e8136404e11ce2023-12-08 · +19dVerified
- HHS OCRbd_339db28c04eef7152023-11-15 · +42dVerified
- Massachusetts State AGbd_66b93c3a19a3219e2023-11-15 · +42dVerified
- California State AGbd_b0b9e4947aa838c92024-02-14 · +49dVerified
Filing propagation · 10 filings · 7 states
View merged incident ↗Pattern: first filing Nov 15 (IL), last Feb 14 (CA) — a 91-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.