&imwidth=800&imheight=600&format=webp&quality=medium "CareCloud confirms massive data breach after 3.7M patients’ records stolen – What we know")
Personal information and medical records of more than 3.75 million people was stolen in a massive cyberattack on healthcare technology company CareCloud, making the breach the fifth-largest healthcare data theft reported in the US so far this year. CareCloud disclosed the number of affected individuals in a filing with the US Department of Health and Human Services (HHS) on Monday (Aug 17). The figure was revised upward in an update a day later, raising the possibility that the final toll could increase further.
The New Jersey-based company provides electronic medical record and billing services to tens of thousands of healthcare providers across the United States. Its systems store sensitive information belonging to millions of patients, including data handled on behalf of hospitals, clinics and doctors’ offices.
What information was stolen?
The breach dates back to March, when hackers accessed patient information stored in one of CareCloud’s cloud environments for six days. The company later said the attackers had removed data from its Amazon Web Services account.
The stolen information includes names, postal addresses, Social Security numbers and medical records. Hackers also obtained government-issued identification details, including passport and driver’s licence numbers, as well as banking and other financial information.
Also read | ChatGPT for Teens? OpenAI rolls out new version with safety features – All you need to know
Trending Stories
&im=FitAndFill=(700,400))
National Handloom Day 2026: From Alia Bhatt to Samantha Ruth Prabhu; Actresses who celebrated India's textile heritage as brides
)
The Royals enter the Doctor Who universe: King Charles and Queen Camilla beam into Commonwealth Games in TARDIS
)
Unitree Robotics targets $9 billion valuation in landmark IPO backed by DeepSeek and Tencent
)
India names 27 sites in Arunachal Pradesh
)
Bharat Bhhagya Viddhaata OTT: When will Kangana Ranaut's film stream online?
&im=FitAndFill=(700,400))
How many soldiers operate one S-400 battery?
)
Shakib Al Hasan ready to return to Bangladesh—under one condition
)
‘Fake news’: MEA rejects report claiming India sought defence pact with Israel after Pakistan, Saudi Arabia, Turkey deal
)
Rockstar to unveil GTA 6 extended look ahead of November launch
)
Russia forms Ukrainian Volunteer Spetsnaz Brigade to fight Ukraine
)
Drug-resistant fungus that hides in hair and enters bloodstream reported in 23 US states
)
Technology transfer deal boosts India's defence manufacturing ambitions
)
Border row erupts in Europe after Ceuta crossings, Spain imposes border controls on Italy
)
Morale plummets on USS Abraham Lincoln: Are US sailors reaching a breaking point? | GRAVITAS
)
'Security can't be bought with Pakistan, Turkey deal': Iran tells Saudi Arabia
)
Baba Vanga's 2026 prophecy: 2 predictions 'already came true', 3 terrifying ones remain. Details inside
)
Colombia’s new president Abelardo de la Espriella vows to ‘defeat narco-terrorists’, signals hardline shift
&im=FitAndFill=(700,400))
New Friday OTT releases (August 7, 2026): Operation Safed Sagar, Vadhandhi, Main Vaapis Aaunga- 6 movies and TV shows on Netflix, Prime Video and more
)
Squadron Leader Bhawana Kanth scripts history as Indian Air Force gets its first woman ‘Top Gun’ pilot
)
RSS says Gen Z protests reflect genuine distress
)
Trump says Iranian school bombing photos could be AI-generated - 'I don’t think...'
)
IAF officer held for sharing sensitive information in 'honey trap' case, booked under Official Secrets Act
)
Stray Kids under scrutiny? Fans react to Grammy submission silence after BTS boycott
&im=FitAndFill=(700,400))
Why the Su-30MKI doesn't need external fuel tanks to fly vast distances
)
Jugal Hansraj reunites with Shekhar Kapur after 40 years for Masoom: The Next Generation
)
New speed limits, automatic challans: Big traffic change coming to Delhi-Meerut Expressway. All you need to know
)
India officially names 27 places in Arunachal to counter China's renaming claims
)
Trump calls White House ballroom ruling a 'national disgrace' as court says Congress approval needed
)
US sanctions Iran’s crypto network after Strait of Hormuz attacks, offers $15m bounty for intel on IRGC finance
&im=FitAndFill=(700,400))
Why the Su-30MKI is one of the heaviest fighters ever built
)
Uttarakhand young innovator builds India's own flying vehicle, conducts first test flight: WATCH
)
Chilling video shows students take cover as teen opens fire at Thai school
)
Reese Witherspoon's father hospitalised after poolside incident in Nashville: Report
The combination of medical, identity and financial records could leave affected individuals vulnerable to identity theft and financial fraud.
CareCloud has offered limited public information about the incident since first disclosing the breach in March. It is unclear whether the company paid a ransom or who was responsible for cybersecurity at the company.
Healthcare sector faces growing cyber threat
The CareCloud breach is the latest in a string of major attacks affecting the US healthcare industry.
TriZetto said in March that a 2024 breach had compromised information belonging to 3.4 million people. Health technology billing software company Craneware also reported a July breach, although the number of affected individuals has not yet been disclosed.
HHS data shows dental insurance company DentaQuest has reported the largest healthcare breach of 2026 so far, affecting at least 15 million people.
The latest incident highlights the growing risks for healthcare companies that store huge volumes of sensitive patient information in cloud-based systems.
