CareCloud breach leaks 3.75 million patients’ sensitive data

A cyberattack on CareCloud exposed personal data for about 3.75 million people, including Social Security numbers, medical histories, government IDs, and banking information, after unauthorized access to a cloud environment in March 2026. CareCloud engaged outside experts, notified authorities, and offered free identity protection. The incident, one of 2026’s largest healthcare breaches, prompts victims to monitor accounts, freeze credit if needed, review medical records and insurance claims, and stay vigilant against phishing and fraud.