CareCloud Confirms Data Breach Affecting Over 3.7 Million Patients
Healthcare data provider CareCloud has confirmed that hackers stole the personal and medical records of over 3.7 million patients in a March cyberattack, making it one of the largest health data breaches this year. The breach was detailed in filings with the Department of Health and Human Services (HHS), which now ranks it as the fifth-largest theft of health data in 2026 so far. CareCloud serves tens of thousands of healthcare providers across the U.S., handling sensitive patient information including names, addresses, Social Security numbers, medical records, government IDs, and financial details. The breach occurred when hackers accessed a cloud storage environment hosted on Amazon Web Services (AWS), exfiltrating large volumes of data over six days. CareCloud has not publicly commented since the initial disclosure in March and its CEO, Stephen Snyder, has not responded to inquiries about potential ransom payments or cybersecurity responsibilities within the company. The incident follows other major healthcare breaches this year, including one by TriZetto affecting 3.4 million people.
Topics: cybersecurity healthcare_data_breaches patient_privacy