CareCloud Data Breach Exposes Medical and Financial Data of 345,000 Patients

CareCloud reported a data breach involving unauthorized access to its AWS environment, affecting 345,000 individuals. The breach exposed a range of sensitive information, including protected health information (PHI), personally identifiable information (PII), and financial data. The company is notifying affected individuals about the breach, which was first disclosed in March 2026. The incident disrupted CareCloud's electronic health record (EHR) systems. Hackers exploited vulnerabilities in the AWS-hosted systems to gain access to the data. CareCloud serves over 45,000 healthcare providers across the U.S. The breach raises significant concerns about patient data security in the healthcare sector.

Key Points: • CareCloud's data breach affects 345,000 individuals, exposing sensitive health and financial data. • The breach was linked to unauthorized access to CareCloud's AWS-hosted systems. • CareCloud is notifying impacted individuals about the breach, first disclosed in March 2026.