CareCloud Discloses Hack of Patient Data Systems

CareCloud, a major provider of electronic health records and healthcare technology solutions, disclosed that hackers gained unauthorized access to one of its data storage environments on March 16, compromising systems that hold sensitive patient information for millions of individuals.

The New Jersey-based company, which serves more than 45,000 healthcare providers including doctors, hospitals, and medical practices, detected the intrusion during routine monitoring that day. According to a filing with the U.S. Securities and Exchange Commission, the attackers maintained access for more than eight hours before CareCloud's security team contained the breach and restored full functionality by the evening. The incident affected only one of the company's six electronic health record environments and did not impact other platforms, divisions, or systems. Officials stated that the threat actors have been fully locked out of the network.

CareCloud has engaged an external cybersecurity firm, described in the filing as a leading advisory team from a Big Four accounting group, to conduct a forensic investigation. The probe aims to determine the initial entry point, the extent of any data...