CARECLOUD , a healthcare technology company, reported a data breach affecting approximately 345,000 individuals, following an unauthorized access incident involving its AWS-hosted systems. The breach, disclosed initially in March 2026, involved sensitive medical and financial data, including names, addresses, Social Security numbers, and bank details. The attackers accessed CareCloud's electronic health record data for at least six days before being detected.
Although no one has officially claimed responsibility, the breach emphasizes ongoing vulnerabilities in healthcare data security. The incident highlights the importance of state regulations in notifying affected individuals.