More than 3.75 million Americans had sensitive personal, financial and medical information exposed in a massive data breach involving healthcare technology company CareCloud.
Read more Political Campaigns Quietly Pay Social Media Influencers to Promote Candidates
The March cyberattack compromised a CareCloud cloud environment used to provide electronic medical records and other technology services to healthcare providers across the United States.
The breach means patients could have been affected even if they had never directly used or created an account with CareCloud.
According to a breach notice filed with the California attorney general, CareCloud discovered a network disruption March 16 and brought in outside cybersecurity experts to investigate.
The company determined that an unauthorized third party had accessed one of its Amazon Web Services environments between March 10 and March 16. The attacker claimed to have stolen information from databases stored within the environment.
CareCloud said investigators found no evidence of continued unauthorized activity after March 16.
Read more Trump Announces Historic Venezuela Oil Deal Giving U.S. Control of 65 Billion Barrels
Initial disclosures indicated hundreds of thousands of people were affected, but the number subsequently climbed to more than 3.75 million, according to federal health regulators, making it one of the largest reported healthcare data breaches of 2026.
The compromised information varies by individual but potentially includes names, addresses, Social Security numbers, driver’s license and passport information, banking and financial information, and medical and health records.
The combination of information could leave victims vulnerable to financial fraud and identity theft long after the initial breach. Unlike passwords, Social Security numbers and medical histories cannot easily be changed after being compromised.
Stolen healthcare information can also be used for medical identity theft, including obtaining treatment or filing insurance claims under another person’s identity. Fraudulent activity could potentially result in incorrect treatments, prescriptions or other information appearing in a victim’s medical records.
CareCloud said it reported the attack to law enforcement, secured the compromised environment and brought in outside cybersecurity specialists following the breach.
Read more U.S. Strikes Iranian Military Targets to Stop New Mines in Strait of Hormuz
