CareCloud confirms 3.7M patients had their medical records stolen in data breach
Health data giant CareCloud has confirmed that a data breach resulted in the theft of personal and medical records for 3.75 million patients. The stolen information includes Social Security numbers, banking details, and sensitive health data.
Why it matters
This incident represents one of the largest healthcare data breaches of 2026, highlighting critical vulnerabilities in cloud-based medical record storage.
Hackers have stolen the personal information and medical records of more than 3.75 million people in a data breach at health data giant CareCloud, the company has confirmed with federal regulators. The disclosure marks the first confirmation of the scale of the data breach, which is now confirmed to be the fifth-largest theft of health data in 2026 so far.
CareCloud detailed the March data breach in a filing with the Department of Health and Human Services (HHS) on Monday. The number of affected victims was reportedly revised up in an update on Tuesday, though it’s unclear if the figure is expected to rise further.
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in