US healthcare IT firm CareCloud's EHR environment breached, more than 3.7 million patients affected

According to TechCrunch, healthcare technology company CareCloud confirmed hackers accessed one of its electronic health record stores in March 2026; according to BleepingComputer, it disclosed the incident in an SEC filing in March, noting an 8-hour platform disruption ^[1][2]. According to BleepingComputer, CareCloud's notice says an unauthorized third party accessed one of its AWS environments between March 10 and 16 and claimed to exfiltrate data; more than 3.7 million people are affected and notices began July 25 ^[2]. BleepingComputer recommends affected people take steps to mitigate risks and stay on high alert for phishing attempts leveraging the stolen data ^[2].

Industries mainly affected: Healthcare

1. If notified by CareCloud, stay on high alert for phishing that uses the stolen data ^[2].