CareCloud Breach Exposes 350,000 People

CareCloud is notifying at least 345,000 to 350,000 people after attackers accessed an Amazon Web Services environment supporting its electronic health record operations from March 10 to March 16, 2026. The potentially compromised data includes medical, identity, and financial information, creating risks of privacy loss and identity fraud. CareCloud says it secured the affected environment, engaged external cybersecurity experts, and is offering affected individuals identity-protection services; the total affected population and responsible threat actor remain undisclosed.