GiaCare, Inc., a healthcare staffing and IT solutions provider, experienced a data breach on December 6, 2025. The incident was caused by unauthorized access through a vulnerability in the third-party vendor Gladinet CentreStack file-sharing platform. GiaCare's own systems were not compromised, but personal information of an undetermined number of individuals was exposed. Notifications to affected individuals began on January 23, 2026, via first-class mail.
The confirmed data types involved in this breach include names, Social Security numbers (SSNs), and driver's license numbers. The exact number of individuals affected has not been publicly released, though at least one individual in New Hampshire was impacted. GiaCare has engaged an IT security vendor, migrated data from CentreStack, and is offering one year of Epiq Privacy Solutions ID 3B credit monitoring to those affected.
While there are ongoing investigations by multiple law firms, no lawsuits have yet been officially filed. Details about the full scope of individuals and states affected may emerge later, and notifications may be delayed in some instances.