Electronic health record company CareCloud says 3.7 million people affected by breach
CareCloud, a healthcare software company, reported a data breach affecting nearly 3.8 million people after an unauthorized party accessed one of its electronic health record systems for approximately eight hours. The company disclosed the incident to the Department of Health and Human Services.
Why this matters: Electronic health records are among the most sensitive data anyone holds about you. Diagnoses, medications, mental health history, reproductive care — it is all there. CareCloud did not just store billing details; it stored the kind of information people share only with their doctors. Nearly four million people now have to wonder what a stranger did with that. Eight hours inside a health record system is a long time. The real accountability question is how the intrusion went undetected and what CareCloud does to protect people who had no choice but to trust it.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.