CareCloud Reports Intrusion Affecting One EHR Environment
Summary
CareCloud reported that a March 16 intrusion affected one of its six EHR environments and disrupted network access for about eight hours. The company restored systems; the scope of accessed or exfiltrated patient data remains under investigation.
Key points
- CareCloud reported that an intrusion on March 16 affected one of its six electronic health record environments.
- The incident disrupted functionality and data access for approximately eight hours before restoration.
- The company said the affected environment holds customer patient health records; the number of individuals affected and types of data accessed or exfiltrated remain undetermined.
- CareCloud engaged its cybersecurity carrier and an external incident-response team to investigate and help secure the environment.
- The company said affected systems were restored and the attacker no longer had access to its database.
- BleepingComputer reported it could not find a ransomware group claiming responsibility.
Article Details
- Victim Organization
- CareCloud
- Incident Type
- Unauthorized intrusion and data breach involving one of six electronic health record environments, with temporary network disruption.
- Incident Date
- 2026-03-16
- Data Types Exposed
- Patient health records; the specific data accessed or exfiltrated remains under investigation.
- Affected Records
- Unknown; the number of affected individuals has not been determined.
- Affected Data Size
- Unknown; the scope of accessed or exfiltrated data remains under investigation.
- Operational Impact
- One of CareCloud's six electronic health record environments was compromised. Functionality and data access were partially disrupted for approximately eight hours; affected systems were restored that evening. CareCloud said other platforms, divisions, systems, and environments were not impacted.
- Ransom Or Extortion
- No ransomware group was found taking credit for the attack; no ransom demand or extortion activity was reported.
- Claim Status
- confirmed