CareCloud
Disclosed Mar 27, 20266 months ago3,756,469 affectedConfirmed
CareCloud AWS breach exposes medical records of 3.76 million patients
Healthcare IT firm CareCloud filed an 8-K after attackers accessed its AWS environment in March 2026, exfiltrated database contents and caused about eight hours of disruption. It later reported 3,756,469 affected individuals to regulators.
What is known
| People affected | 3,756,469 (as reported to HHS) |
|---|---|
| Disclosed | Mar 27, 2026 |
| Discovered | Mar 16, 2026 |
| Happened | Mar 10, 2026 |
| Attack | Hacking |
| Data exposed | Names, Health, Social Security numbers, Dates of birth, Insurance, Government IDs, Payment cards, Financial, Addresses |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: CareCloudoag.ca.gov · Official notice | Official notice |
| Washington Attorney General breach notice: CareCloudatg.wa.gov · Official notice | Official notice |
| Oregon DOJ breach notice: CareCloudjustice.oregon.gov · Official notice | Official notice |
| HHS OCR breach report: CareCloud (Business Associate, NJ)ocrportal.hhs.gov · Official notice | Official notice |
| CareCloud, Inc. Form 8-K, Item 1.05 (2026-03-27)sec.gov · SEC filing | SEC filing |
| California AG breach notice: CareCloudoag.ca.gov · Regulator | Regulator |
| Healthcare tech firm CareCloud says hackers stole patient datableepingcomputer.com · News | News |
| Healthtech firm CareCloud data breach impacts 3.7 million patientsbleepingcomputer.com · News | News |
| Texas Attorney General data security breach report BR-0005263: CareCloudoag.my.site.com · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| SEC 8-Ktotal | Mar 27 | |
| Researchtotal | Mar 27 | 3,756,469 |
| Washington AGresidents of WA | Jul 24 | 20,706 |
| HHS OCRtotal | Jul 24 | 3,756,469 |
| California AGresidents of CA | Jul 25 | |
| Oregon DOJresidents of OR | Aug 4 | 57,920 |
| Texas AGresidents of TX | Aug 18 | 270,529 |
History of this record
- 2026-09-25 · data_types: ["names","health","ssn","dob","insurance"] to ["names","health","ssn","dob","insurance","government-id","payment-card","financial","addresses"] · backfill source
- 2026-09-25 · data_types: ["names","health"] to ["names","health","ssn","dob","insurance"] · seed source
- 2026-09-25 · summary: empty to Healthcare IT firm CareCloud filed an 8-K after attackers accessed its AWS environment in March 2026, exfiltrated database contents and caused about eight hours of disruption. It later reported 3,756,469 affected individuals to regulators. · seed source
- 2026-09-25 · title: Material cybersecurity incident reported to the SEC (8-K Item 1.05) to CareCloud AWS breach exposes medical records of 3.76 million patients · seed source
- 2026-09-25 · disclosed: 2026-07-24 to 2026-03-27 · backfill source
- 2026-09-25 · title: empty to Material cybersecurity incident reported to the SEC (8-K Item 1.05) · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 3756469 · backfill source
- 2026-09-25 · sector: other to health · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · disclosed: 2026-07-25 to 2026-07-24 · backfill source
- 2026-09-25 · discovered: empty to 2026-03-16 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.