Securityaffairs.Co CareCloud Data Breach Exposes Medical and Financial Data of 345,000 Patients
Article Content
- •CareCloud's data breach affects 345,000 individuals, exposing sensitive health and financial data.
- •The breach was linked to unauthorized access to CareCloud's AWS-hosted systems.
- •CareCloud is notifying impacted individuals about the breach, first disclosed in March 2026.
CareCloud reported a data breach involving unauthorized access to its AWS environment, affecting 345,000 individuals. The breach exposed a range of sensitive information, including protected health information (PHI), personally identifiable information (PII), and financial data. The company is notifying affected individuals about the breach, which was first disclosed in March 2026. The incident disrupted CareCloud's electronic health record (EHR) systems. Hackers exploited vulnerabilities in the AWS-hosted systems to gain access to the data. CareCloud serves over 45,000 healthcare providers across the U.S. The breach raises significant concerns about patient data security in the healthcare sector.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track CareCloud in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical WSO2 API Manager Vulnerability Under Active Exploitation A critical vulnerability (CVE-2026-5430) in WSO2 API Manager is being actively exploited, allowing unauthenticated attackers to forge admin tokens via JWT authentication bypass. This flaw, which has a CVSS score of 10.0, affects multiple WSO2 products including API Manager, Universal Gateway, Traffic Manager, and API… 
Critical Linux Kernel Vulnerability CVE-2025-39682 Under Active Exploitation A critical vulnerability (CVE-2025-39682) in the Linux kernel allows remote code execution through mishandling of zero-length TLS records. This flaw affects kTLS-enabled hosts running vulnerable kernel versions, exposing them to attackers without authentication. CISA added this vulnerability to its Known Exploited…