CareCloud Breach Exposes Data Across 45,000+ Providers' Patient Bases

Hackers accessed one of CareCloud's six patient data stores on AWS for six days in March 2026. At least 345,000 individuals are affected. Stolen data includes Social Security numbers, financial details, government IDs, and medical records. No ransomware group has claimed credit. CareCloud serves 45,000+ U.S. healthcare providers, concentrating risk across thousands of independent practices through one EHR vendor.