Health data giant CareCloud says hackers accessed patients’ medical records

In a concerning revelation, healthcare technology leader CareCloud has acknowledged that hackers gained access to a portion of its electronic health records during a recent data breach. This incident, reported to the U.S. Securities and Exchange Commission last Friday, occurred on March 16. The company identified unauthorized access to one of its six data environments used for storing medical and healthcare records. The breach lasted over eight hours, and while CareCloud has yet to confirm whether any data was exfiltrated, the nature of the accessed information remains unclear. Fortunately, the company believes that the hackers are no longer within its network following a system restoration on the same day. To further investigate the situation, CareCloud has engaged an unspecified cybersecurity firm. The extent of those affected by the breach has not been disclosed. CareCloud provides essential healthcare technology services, including electronic health record storage, to over 45,000 providers, which encompasses numerous hospitals and medical practices serving millions of patients. Such organizations are often prime targets for cybercriminals seeking to steal sensitive personal data for financial gain. In a similar vein, a ransomware attack by Russian cybercriminals in 2024 led to the theft of a significant volume of health records from Change Healthcare, resulting in widespread disruptions in healthcare services for months. As for CareCloud, it remains uncertain if the recent attack led to any data loss or if the perpetrators have made any demands to the company. CareCloud has not yet commented on inquiries regarding its data storage practices, including whether patient data is distributed across its various environments or if backups exist for redundancy. Public records indicate that a substantial portion of CareCloud's data is hosted on Amazon Web Services. In its SEC filing, CareCloud indicated that it recognized the breach's potential material impact on its operations on March 24, prompting a legal obligation to inform its investors. While the company asserts that the breach is unlikely to harm its financial standing, it acknowledges that its investigation is ongoing. For anyone with additional insights into CareCloud’s data breach or knowledge of its security measures, reaching out via encrypted messaging is encouraged.