CareCloud’s March AWS-hosted electronic health record intrusion now stands at 3,756,469 affected people, after federal breach tracking revised the impact from the roughly 350,000 first reported in state notices. The company serves tens of thousands of healthcare providers, so this is no longer a single-customer incident but a platform-wide patient-data exposure.
CareCloud said attackers reached one of its AWS environments for several days in March and exfiltrated data from databases there. The stolen records included names, addresses, Social Security numbers, driver’s license numbers, dates of birth, insurance details, and medical information, with a small subset also containing full payment card data.
What remains unsettled is who was behind the intrusion and whether any ransom was paid. For healthcare groups that rely on shared EHR software, the durable exposure sits with the provider’s hosted environment and the downstream records it aggregates, not just the clinic’s own perimeter.
Electronic health record company CareCloud says 3.7 million people affected by breach
Healthcare software firm CareCloud filed documents with the Department of Health and Human Services confirming that 3,756,469 people had information leaked after a hacker spent eight hours in one of the company’s electronic health record environments.