Between March 10 and March 16, 2026, attackers accessed an AWS environment used by CareCloud Health, an electronic health record division of CareCloud. The breach resulted in exfiltration of sensitive personal, financial, and medical data of over 350,000 individuals. The compromised information includes names, addresses, Social Security numbers, dates of birth, government ID numbers, financial account numbers, credit/debit card numbers with CVV for some, and medical and health insurance information. CareCloud’s investigation concluded on June 24, 2026, and the company has since secured the affected environment with external cybersecurity assistance, confirming no persistent unauthorized access remains. CareCloud is providing up to 24 months of free identity theft protection and credit monitoring to affected individuals.

The breach exposed highly sensitive personal and financial information of at least 350,000 individuals, including Social Security numbers, government IDs, financial account details, and medical records. This exposure increases the risk of identity theft, financial fraud, and privacy violations for the affected individuals. Although CareCloud has found no evidence of misuse of the stolen data to date, the nature of the compromised information poses significant potential for harm if exploited.

CareCloud has secured the affected AWS environment, eliminated the threat, and confirmed no persistent unauthorized access remains. The company is providing affected individuals with up to 24 months of free identity theft protection, credit monitoring, and ID theft recovery services, including a $1,000,000 insurance reimbursement policy. No additional immediate action is required from external parties based on the current information. Organizations should monitor vendor advisories for any updates.