Massive Data Breach at CareCloud Affects 3.7M Patients' Medical Records

CareCloud has confirmed that hackers stole personal information and medical records of over 3.75 million patients in a data breach disclosed to federal regulators. The breach, which occurred in March 2026, is now the fifth-largest healthcare data theft this year. Hackers accessed patient data stored in CareCloud's cloud environment, specifically targeting its Amazon Web Services account. The stolen data includes names, addresses, Social Security numbers, medical information, and financial details. CareCloud has not commented on whether a ransom was paid or on the company's cybersecurity leadership. This incident follows other significant healthcare breaches in 2026, including one affecting 15 million records at DentaQuest. The company is under scrutiny as the number of affected individuals may still rise.

Key Points: • CareCloud confirmed a data breach affecting over 3.75 million patients. • The breach involved unauthorized access to sensitive medical and personal data. • CareCloud has not publicly addressed the incident since its initial disclosure.