CareCloud Notifies Hundreds of Thousands Following Severe Healthcare Data Hack

CareCloud, a major cloud-based electronic health record (EHR) and practice management provider, has officially begun notifying hundreds of thousands of patients following a severe cybersecurity incident. Cybercriminals breached internal cloud storage environments and compromised personally identifiable information alongside confidential medical history records.

The company stated that upon discovering unauthorized network access, it isolated compromised servers and engaged third-party forensic incident response specialists. IT administrators remediating infrastructure logs can use the [Code Formatter](/tools/code-formatter/) to review and clean diagnostic script outputs.

Scope of the Infiltration and Stolen Medical Records

Preliminary investigation reveals that threat actors accessed database backup files containing patient names, Social Security numbers, diagnosis codes, and billing details. CareCloud is offering identity monitoring services to affected individuals while working with federal law enforcement.

Remediation Steps and Mandatory Security Audits

Healthcare security experts emphasize that third-party cloud vendors remain prime targets for sophisticated cyber gangs. Regulatory bodies are preparing mandatory compliance reviews to assess whether adequate encryption standards were maintained on legacy backup volumes.