CareCloud Data Breach Affects Over 3.7 Million People
CareCloud has reported a significant data breach affecting more than 3.75 million people, following an unauthorized third-party access to its cloud environment. The breach, which occurred between March 10 and March 16, 2026, involved the theft of sensitive personal and medical records, including Social Security numbers, financial details, and treatment history. Healthcare providers, such as Brookhaven ENT, Allergy, Aesthetics & Hearing, use CareCloud as a third-party electronic health record service provider. While the breach was contained and no evidence of continued unauthorized activity was found after March 16, the stolen data could lead to medical identity theft and financial fraud. CareCloud has secured the affected environment and offered complimentary identity protection services through IDX to those impacted. Experts recommend that affected individuals monitor their credit reports, review their medical records for unfamiliar treatments, and use strong, unique passwords to mitigate the risk of future fraud.