CareCloud breach exposed records of 3.7M patients in 2026
CareCloud confirms breach affecting 3.7 million patient records in 2026.
Why it matters: This massive breach amplifies privacy risks and raises compliance stakes for healthcare providers and legal teams managing breaches.
- The breach impacted one of CareCloud’s six EHR environments hosted on AWS between March 10-16, 2026.
- An eight-hour disruption of CareCloud’s services occurred on March 16 and was fully restored the same day.
- Data stolen includes names, addresses, Social Security numbers, financial and medical records.
- Over 345,000 affected patients had been notified by late July 2026; the total is now confirmed at 3.7 million.
CareCloud, a healthcare technology company based in Somerset, New Jersey, confirmed in August 2026 a significant data breach that exposed the records of approximately 3.7 million patients. The incident targeted one of its six electronic health record (EHR) environments hosted on Amazon Web Services (AWS), with unauthorized access occurring between March 10 and 16, 2026.
On March 16, CareCloud experienced an eight-hour network disruption affecting functionality and data access. Service was fully restored later that day. According to CareCloud's statement, the attackers claimed to have exfiltrated databases from the compromised EHR environment.
The stolen data encompassed sensitive personal information including names, addresses, Social Security numbers, government IDs, financial details, and medical records. By late July 2026, CareCloud had notified over 345,000 individuals across the US impacted at that time.
This breach ranks among the largest healthcare data exposures in the United States for 2026 and underscores persistent security vulnerabilities within the healthcare sector. At present, no hacking group has publicly claimed responsibility, and details on how the attackers gained unauthorized access remain undisclosed.
Healthcare providers, legal advisors, and compliance teams are now under intensified pressure to implement robust cybersecurity measures and ensure swift breach notification protocols to protect patient privacy and comply with regulatory obligations.
By the numbers:
- 3.7 million patients affected — total impacted by CareCloud breach
- March 10-16, 2026 — timeframe of unauthorized access
- Eight hours — duration of service disruption on March 16