CareCloud Data Breach Exposes 345,000 Americans

CareCloud is notifying 345,000 Americans after a security breach compromised their private data. The New Jersey company, which provides electronic health record services for over 45,000 medical providers, discovered unauthorized access to its database hosted on Amazon Web Services. While the firm contained the incident on March 16, 2026, the investigation reveals that sensitive information was stolen.

The stolen data includes Social Security numbers, passport details, driver licenses, bank account numbers, and detailed medical records. CareCloud claims the intrusion was limited to one of its six health record environments, but the number of impacted individuals could rise as further state filings are processed. The company has engaged cybersecurity experts to assist with the fallout.

So far, no ransomware groups have claimed responsibility for the attack. CareCloud stated that it has insurance coverage for potential losses, though the incident highlights the ongoing vulnerability of patient data within major healthcare networks. This is part of a larger trend of high profile data leaks affecting millions of people across the medical sector this year.