Now Hacked
EN
Data breach

CareCloud hack exposes medical data of about 3.7 million patients

First reported · Last reported · 14 related reports

It became known in March 2026 that a hacker had stolen patient medical records from medical software company CareCloud. The leaked data included medical information, Social Security numbers and banking information. The company informed the US Securities and Exchange Commission of the possible breach and began notifying victims, and in August the scale of the damage grew to about 3.7 million people.

Key facts

Affected organization
CareCloud
Incident type
Data breach
Occurred / detected
Not confirmed
Scale of damage
Medical records, Social Security numbers and banking information of about 3.7 million patients
Cause / method
Theft of patient medical records through a hack of its AWS environment
Location
United States

If your data was exposed

Exposed dataNational ID numberBank accountHealth & medical data

  1. Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organization’s official website or app.

Timeline

  1. CareCloud investigated a possible leak of patient information and notified the US Securities and Exchange Commission.
  2. It was reported that a hacker had accessed patient medical records.
  3. CareCloud began notifying hundreds of thousands of victims of the medical record theft.
  4. The scale of the damage was tallied at 3.75 million people.
  5. CareCloud confirmed the theft of medical records of about 3.7 million patients.

Also affected by this incident

14 related reports

The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.