On December 11, 2023, CareTree, Inc. filed a notice of data breach with the Attorney General of California after discovering that an unauthorized actor was able to access the CareTree platform. In this notice, CareTree explains that the incident resulted in an unauthorized party being able to access consumers’ sensitive information, which includes their names, addresses, driver’s license numbers, Social Security numbers, financial account information, dates of birth, medical information, and health insurance information. Upon completing its investigation, CareTree began sending out data breach notification letters to all individuals whose information was affected by the recent data security incident.

If you received a data breach notification from CareTree, Inc., it is essential you understand what is at risk and what you can do about it. As we’ve previously mentioned in related posts, your Social Security number is a prime target for hackers, who can either use it to steal your identity or sell it for a handsome profit on the Dark Web. A data breach lawyer can help you learn more about how to protect yourself from becoming a victim of fraud or identity theft, as well as discuss your legal options following the CareTree data breach. For more information, please see our recent piece on the topic here.

What Caused the CareTree Data Breach?

The CareTree data breach was only recently announced, and more information is expected soon. However, CareTree’s filing with the Attorney General of California provides some important information on what led up to the breach. According to this source, on August 16, 2023, CareTree detected unusual activity within the CareTree platform. In response, CareTree secured the platform, notified law enforcement, and then began an investigation with the help of outside data security experts.

The CareTree investigation determined that an unauthorized party gained access to the CareTree platform, as well as certain confidential information stored within the platform, on July 21, 2023.

After learning that sensitive consumer data was accessible to an unauthorized party, CareTree reviewed the compromised files to determine what information was leaked and which consumers were impacted. CareTree completed this process on October 13, 2023. While the breached information varies depending on the individual, it may include your name, address, driver’s license number, Social Security number, financial account information, date of birth, medical information, and health insurance information.

On December 11, 2023, CareTree sent out data breach letters to anyone who was affected by the recent data security incident. These letters should provide victims with a list of what information belonging to them was compromised.

More Information About CareTree, Inc.

CareTree, Inc. is a software company based out of Chicago, Illinois. CareTree provides care management and patient advocate software for care providers. CareTree also developed an online collaboration platform designed to improve caregiver operations as well as caregivers’ ability to communicate with families of nursing home residents. CareTree employs more than 25 people and generates approximately $5 million in annual revenue.