CareCloud breach exposes personal and medical data of over 3.75 million people
CareCloud reported that hackers accessed its Amazon Web Services environment in March, compromising the personal and health information of more than 3.75 million individuals.
During a week in early March 2026, attackers breached a CareCloud Amazon Web Services environment and extracted data from its databases. The stolen information includes names, postal addresses, Social Security numbers, driver’s license and passport identifiers, medical and health records, as well as banking details, affecting over 3.75 million patients of the company’s electronic-medical-record platform. CareCloud reported the incident to the California Attorney General, hired outside cybersecurity experts, and confirmed that unauthorized activity stopped after March 16.
The company also informed law-enforcement and has since offered complimentary identity-protection services via IDX. Federal health regulators have listed the breach as one of the biggest healthcare data exposures of 2026. Affected individuals are urged to consider credit freezes, monitor financial and medical accounts, and enroll in the offered protection services.
Why it matters
Sensitive health and financial data of millions are exposed, increasing the risk of identity and medical fraud.
In this story
