[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$faX-NGdk-6daTIsDdWoMMyyIiZ3SqPb1W4yg1YztQf8c":3},{"article":4,"iocs":41},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":6,"full_text":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":23,"category":24,"article_tags":28},"6b00d37e-425d-46a9-8b3e-e88b110e1054","Healthtech firm CareCloud data breach impacts 3.7 million patients","healthtech-firm-carecloud-data-breach-impacts-3-7-million-patients-fd9aa5","U.S. healthcare IT company CareCloud disclosed that the data breach incident it suffered earlier this year has impacted more than 3.7 million individuals. [...]","U.S. healthcare IT company CareCloud has disclosed that a data breach incident earlier this year has impacted over 3.7 million individuals. The attack, which occurred between March 10 and March 16, 2026, involved unauthorized access to an AWS environment and potential exfiltration of data from databases. The incident caused an 8-hour network disruption and cut access to one of its databases, with investigations confirming the compromise of patient data.","Healthtech firm CareCloud data breach impacts 3.7 million patients By Bill Toulas August 19, 2026 04:07 PM 0 U.S. healthcare IT company CareCloud disclosed that the data breach incident it suffered earlier this year has impacted more than 3.7 million individuals. The healthcare technology organization is publicly traded and provides electronic health records, medical billing, practice management, and revenue-cycle services. The company disclosed the incident in March via a filing with the U.S. Securities and Exchange Commission (SEC), noting that the attack caused an 8-hour network disruption on its platform and cut access to one of its databases. At the time, the firm said the compromised environment contained patient data, indicating the risk of sensitive medical information being stolen. Following the incident, CareCloud launched an investigation to determine its scope and how many people were potentially impacted. In a report to the U.S. Department of Health and Human Services, the company informs that the number of people affected by the breach was 3,756,469. CareCloud started to distribute data breach notifications on July 25, sharing more details uncovered during the investigation. “The investigation determined that, between March 10 and March 16, 2026, an unauthorized third party accessed one of CareCloud’s AWS environments and claimed to have exfiltrated data from databases within that environment,” the notification says. Beyond full names, the sample letter shared with authorities does not specify the type of data exposed. The notification recipients are offered 12\u002F24 months of identity protection service coverage through IDX, redeemable until December 17, 2026. Because CareCloud does not have a direct relationship with patients, impacted individuals will likely hear of the company for the first time. It is recommended to take appropriate action to mitigate the risks arising from the cybersecurity incident and remain on high alert for phishing attempts leveraging the stolen data. At the time of writing, no ransomware groups or data extortion gangs have taken credit for the attack at CareCloud. BleepingComputer has contacted CareCloud with questions about the incident and results of the investigation, and we will update this post with the information when we receive it. Once attackers have valid credentials, only 37% of their actions are blocked Overall prevention scores can hide what happens after initial access. Once attackers are using valid credentials, prevention drops sharply.The Blue Report 2026 measures defenses technique by technique across 338 million simulations run in customer production environments. Get the report Related Articles: Data breach at medical billing firm MCBS affects 1.26 million peopleMedtronic notifies customers impacted by ShinyHunters data breachHealthtech firm Xolis suffers data breach impacting 1.4 million peopleSafePal data breach impacts 39,798 customers, stolen info for saleUnlimited Technology Systems breach impacts 3.8 million people","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fhealthtech-firm-carecloud-data-breach-impacts-37-million-patients\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2026\u002F08\u002F19\u002FCareCloud.jpg","2026-08-19T20:07:12+00:00","2026-08-19T22:00:07.51867+00:00",8,[17,20],{"name":18,"type":19},"AWS","product",{"name":21,"type":22},"CareCloud","vendor","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":23,"icon":25,"name":26,"slug":27},null,"Breaches","breaches",[29,31,36],{"category":30},{"id":23,"icon":25,"name":26,"slug":27},{"category":32},{"id":33,"icon":25,"name":34,"slug":35},"d95477d7-eb04-4fad-a2dc-be1428040ce7","Privacy Fines","privacy-fines",{"category":37},{"id":38,"icon":25,"name":39,"slug":40},"fbace4ad-a9f5-407c-b73c-88cd9d221ecc","HIPAA","hipaa",[]]