CareCloud Data Breach Impact Grows to 3.7 Million Individuals

https://www.securityweek.com/wp-content/uploads/2025/07/data-breach-healthcare-medical.jpg

The recently disclosed CareCloud data breach affects more than 3.7 million individuals, far more than initially believed.

The cloud-based healthcare solutions provider revealed in early July that it had detected a network intrusion in mid-March. The breach was discovered following a disruption involving an electronic health record environment.

An investigation showed that threat actors gained access to one of CareCloud’s AWS environments between March 10 and March 16. The hackers claimed to have exfiltrated information from databases in the compromised environment, according to the company.

The stolen information includes names, addresses, SSNs, driver’s license numbers, dates of birth, health insurance information, and medical and healthcare information. For some individuals (a very limited subset), the attackers also obtained full payment card information.

No known cybercrime group appears to have publicly taken credit for hacking CareCloud, and the company has not said who is behind the attack. It is unclear whether CareCloud...

Copyright of this story solely belongs to securityweek.com. To see the full text click HERE

Read more