CareCloud Data Breach Impacts 3.7 Million Individuals

Healthcare technology provider CareCloud has confirmed that a data breach earlier this year impacted more than 3.7 million individuals, making it one of the largest health data thefts reported in 2026. The company, which provides electronic health records and medical billing services to tens of thousands of providers, disclosed the full scope of the incident in a filing with the U.S. Department of Health and Human Services.

The breach occurred between March 10 and March 16, 2026, when an unauthorized third party accessed one of CareCloud's Amazon Web Services environments. According to the company's investigation, the attacker claimed to have exfiltrated data from databases within that environment. The incident initially caused an eight-hour network disruption on CareCloud's platform and cut access to one of its databases, which the company first reported in a March filing with the U.S. Securities and Exchange Commission.

The stolen information includes patients' full names, postal addresses, Social Security numbers, and medical and health information. The attackers also took government-issued identification numbers, such as passports and driver's licenses, as well as banking...