AI Governance
Data Centers
Drones
Climate
Privacy
2026 Maine Senate
Bob Dylan
Last Update: 10/27/2026 at 6:00 AM EST
CareCloud Data Breach
Coverage from CPO Magazine, Fox News, and others
An unauthorized party accessed a CareCloud environment hosted on Amazon Web Services from March 10 through March 16, 2026, disrupting access to an electronic health record environment for about eight hours.
CareCloud disclosed the incident to the SEC and later reported 3,756,469 affected people to HHS, though some state filings and reports gave a much smaller notification count. Potentially exposed information included personal identifiers and, depending on the records involved, financial, medical, or insurance data. Reports describe patient notifications and an offer of identity-protection services, while leaving unresolved whether all affected records were taken or contained the same information.
Looking Back
203 Day Timeline
Mar 29
May 3
Jun 7
Jul 12
Aug 9
Sep 13
Oct 18
History
10/13/2026
CareCloud’s response moved into patient outreach: notifications began in July, with identity-protection services offered. The reported affected count and core incident details remain unchanged.
All Articles28 articles
Important
Oracle Health reported in March 2025 that a January breach involving legacy Cerner servers exposed personal and medical data of approximately 20 million people across the United States.
10/14/2026 • Data Breaches & Exposure Events • General
State filings reported in 2025 that unauthorized access to legacy Cerner systems operated by Oracle Health affected about 19.9 million people across multiple US states.
10/18/2026 • Data Breaches & Exposure Events • General
Security Boulevard reported this week that ten breaches and suspected incidents affected organizations across healthcare, finance, communications, retail, software, and data services worldwide.
8/21/2026 • Data Breaches & Exposure Events • General
Interesting
CareCloud disclosed in 2026 that unauthorized actors accessed an AWS-hosted electronic health record data store in the United States, potentially affecting 345,000 people.
8/2/2026 • Data Breaches & Exposure Events • General
CareCloud disclosed in California filings that hackers accessed an AWS-hosted data environment in March 2026, potentially exposing medical and financial information belonging to nearly 350,000 people.
8/2/2026 • Data Breaches & Exposure Events • General
CareCloud notified at least 345,000 people in the United States after unauthorized access to a New Jersey company electronic health record database exposed medical, identity, and financial information in March 2026.
8/1/2026 • Data Breaches & Exposure Events • General
CareCloud notified at least 350,000 people on June 24, 2026, after hackers accessed an AWS electronic health record environment in the CareCloud Health division between March 10 and March 16.
8/1/2026 • Data Breaches & Exposure Events • General
Medical Computer Business Services disclosed on July 30, 2026, that a September 2025 ransomware incident in Augusta, Georgia, affected 1,261,464 people across multiple states.
7/31/2026 • Data Breaches & Exposure Events • General
CareCloud reported in United States regulatory notifications that a March cyberattack accessed a cloud repository and may have exposed medical, identity, and financial records of at least 345,000 people.
7/31/2026 • Data Breaches & Exposure Events • General
Privacy Guides documented data breaches and exposures affecting millions of people across cloud, logistics, government, and healthcare systems during August 14-20, 2026.
8/21/2026 • Data Breaches & Exposure Events • General
CareCloud notified at least 350,000 people on June 24, 2026, after hackers accessed and likely exfiltrated sensitive information from an AWS environment supporting healthcare records.
7/31/2026 • Data Breaches & Exposure Events • General
CareCloud notified at least 350,000 people in June 2026 that hackers accessed a Massachusetts-reported AWS environment and likely stole personal, financial, and medical information.
7/31/2026 • Data Breaches & Exposure Events • General
CareCloud disclosed that hackers accessed health record storage in the United States from March 10 through March 16, affecting at least 345,000 people.
7/30/2026 • Data Breaches & Exposure Events • General
CareCloud disclosed in July 2026 that a U.S. network intrusion exposed health and identity information affecting 3,756,469 people.
8/21/2026 • Data Breaches & Exposure Events • General
CareCloud reported that an unauthorized third party accessed a health-record AWS environment from March 10 to March 16, 2026, potentially affecting 3,756,469 people in the United States.
8/21/2026 • Data Breaches & Exposure Events • General
CareCloud reported a March 16 intrusion that disrupted access to one electronic health record environment in its CareCloud Health division for about eight hours.
3/29/2026 • Data Breaches & Exposure Events • General
CareCloud disclosed in 2026 that unauthorized access to an Amazon Web Services environment affected 3,756,469 people through potentially exposed medical, identity, and financial information.
8/21/2026 • Data Breaches & Exposure Events • General
CareCloud disclosed on March 27 that unauthorized access to an AWS environment supporting electronic health records exposed information affecting 3,756,469 individuals.
8/20/2026 • Data Breaches & Exposure Events • General
CareCloud disclosed in March 2026 that hackers stole personal information and medical records affecting more than 3.75 million people in the United States.
8/20/2026 • Data Breaches & Exposure Events • General
CareCloud reported in June that a March unauthorized intrusion into an AWS environment exposed health and financial information affecting about 3.8 million people in the United States.
8/19/2026 • Data Breaches & Exposure Events • General
CareCloud reported in 2020s that an unauthorized third party accessed a healthcare AWS environment, potentially exposing 3,756,469 patients' personal information.
8/19/2026 • Data Breaches & Exposure Events • General
CareCloud notified nearly 3.8 million people in the United States after unauthorized access to an AWS environment potentially exposed health, identity, and financial records in March 2026.
8/19/2026 • Data Breaches & Exposure Events • General
CareCloud reported in March that an unauthorized party accessed a company Amazon Web Services environment, potentially exposing information for 3,756,469 patients across the United States.
8/26/2026 • Data Breaches & Exposure Events • General
CareCloud confirmed in July 2026 that a March cyberattack on an AWS environment exposed records belonging to 3,756,469 people in the United States.
8/20/2026 • Data Breaches & Exposure Events • General
On July 25, 2026, CareCloud began notifying individuals across the United States that unauthorized access to an AWS environment in March affected 3,756,469 people.
8/19/2026 • Data Breaches & Exposure Events • General
CareCloud disclosed in federal filings that a hacker accessed its AWS and electronic health record environments in March, exposing sensitive information belonging to 3,756,469 people.
8/19/2026 • Data Breaches & Exposure Events • General
CareCloud reported that attackers accessed an AWS environment in mid-March, exposing sensitive healthcare and identity data belonging to 3,756,469 individuals.
8/19/2026 • Data Breaches & Exposure Events • General
CareCloud confirmed in a Monday HHS filing that hackers stole medical, identity, and financial data from more than 3.75 million people in a March cloud breach.
8/19/2026 • Data Breaches & Exposure Events • General