Healthtech Giant CareCloud Data Breach Impact Expands to 3.7 Million Patients

Healthcare technology provider **CareCloud** has revised its data breach notifications, confirming that a major security incident disclosed earlier this year impacted **3.7 million patients** across the United States. Exfiltrated files contain sensitive protected health information (PHI) and billing records.

Key Technical Developments

Investigators determined that threat actors gained unauthorized access through a compromised administrative credential lacking multi-factor authentication (MFA). Exfiltrated data includes patient names, Social Security numbers, diagnostic codes, and insurance claim histories.

Industry Impact & Outlook

CareCloud has implemented enterprise-wide credential resets, deployed continuous threat detection software, and offered free credit monitoring services to affected individuals.