Breaches · 54 days ago
CareCloud’s March AWS-hosted electronic health record intrusion now stands at 3,756,469 affected people, after federal breach tracking revised the impact from the roughly 350,000 first reported in state notices. The company serves tens of thousands of healthcare providers, so this is no longer a single-customer incident but a platform-wide patient-data exposure.
CareCloud said attackers reached one of its AWS environments for several days in March and exfiltrated data from databases there. The stolen records included names, addresses, Social Security numbers, driver’s license numbers, dates of birth, insurance details, and medical information, with a small subset also containing full payment card data.
What remains unsettled is who was behind the intrusion and whether any ransom was paid. For healthcare groups that rely on shared EHR software, the durable exposure sits with the provider’s hosted environment and the downstream records it aggregates, not just the clinic’s own perimeter.
4 sources covering this story
The Record from Recorded Future
Electronic health record company CareCloud says 3.7 million people affected by breach
Healthcare software firm CareCloud filed documents with the Department of Health and Human Services confirming that 3,756,469 people had information leaked after a hacker spent eight hours in one of the company’s electronic health record environments.
Healthtech firm CareCloud data breach impacts 3.7 million patients
healthcare IT company CareCloud disclosed that the data breach incident it suffered earlier this year has impacted more than 3.7 million individuals.
CareCloud confirms 3.7M patients had their medical records stolen in data breach | TechCrunch
The cyberattack at CareCloud resulted in one of the largest reported data breaches in the U.S.
CareCloud Data Breach Impact Grows to 3.7 Million Individuals
The data breach was initially believed to affect roughly 350,000 people, but the HHS breach tracker shows a far bigger impact.
Part of the PlainSec briefing for 2026-08-20