A malware incident with ARcare exposed a limited amount of personal and/or medical information of its patients. The attack infected its systems with a malware infection and caused a temporary disruption to services. ARcare immediately shut down its systems and worked to secure its systems and investigated the incident, however an unauthorised party had already acquired some of it patients. The exposed information included the personal information like names, contact numbers, medical and health information, Social Security numbers, financial account information, medical treatment information, prescription information, medical diagnosis or condition information, and health insurance information.