CareCloud

Profile narrative

CareCloud operates as a provider of electronic health record (EHR) solutions that are hosted on Amazon Web Services. The company’s platforms are designed to store and manage patient health information for healthcare organizations. Its services enable clinicians to access, update, and share clinical data within a secure cloud environment. CareCloud primarily serves the healthcare sector in the United States.

In March 2026, CareCloud disclosed that unauthorized parties gained access to one of its AWS‑hosted EHR environments, resulting in the likely exfiltration of databases containing personal, financial, and medical information. The incident affected hundreds of thousands of individuals, exposing details such as names, addresses, dates of birth, Social Security numbers, government identification numbers, financial account data, and health records. Following the breach, the company offered identity theft protection services to those impacted. CareCloud also notified relevant regulators and the affected individuals as part of its response.

The breach highlighted CareCloud’s role as a custodian of sensitive data that spans personal identifiers, financial details, and clinical health information. Its specialization in cloud‑based EHR systems places it at the intersection of health information technology and data security. The company’s handling of regulated health data subjects it to federal and state privacy requirements, which prompted regulatory notification after the incident. CareCloud’s headquarters are located in the United States, reflecting its domestic focus and operational base. While the organization continues to provide EHR services, the 2026 event underscored the challenges of safeguarding large volumes of protected health information in a cloud setting.

Incidents

1 incident linked to this organisation.