Archive — US — techcrunch
CareCloud confirms 3.7M patients had their medical records stolen in data breach
CareCloud has confirmed a data breach impacting 3.75 million patients, marking the fifth-largest health data theft in 2026. The breach involved sensitive personal and medical information, accessed over a six-day period. CareCloud serves numerous healthcare providers, raising concerns about the security of health data in the industry.
Key points
- CareCloud reported a data breach affecting 3.75 million patients.
- The breach was confirmed in a filing to HHS on a March incident.
- Hackers accessed patient data from Amazon Web Services over six days.
- Stolen information includes names, Social Security numbers, and medical records.
- This breach is the fifth-largest healthcare data theft in 2026.
- CareCloud has not publicly commented further on the incident since March.
Why it matters
- The breach highlights ongoing cybersecurity vulnerabilities in healthcare, paralleling other significant breaches in 2024 and 2026.
- It emphasizes the rising trend of data security breaches amid increased health data digitalization.
- Other recent breaches include TriZetto (March 2024) impacting 3.4 million people and DentaQuest affecting 15 million patients, indicating a systemic issue.
The CareCloud breach underscores serious concerns about health data security, echoing a troubling trend in the industry as organizations grapple with increasing cyber threats and the need for robust cybersecurity measures.