CareCloud confirms 3.7M patients had their medical records stolen in data breach | TechCrunch

Last day to exhibit your breakthrough to 10,000+ tech leaders at Disrupt is on Oct 2. Book Exhibit Table Now. Disrupt doors open Oct. 13. Get your pass and bring someone with you at 50% off. REGISTER NOW. Hackers have stolen the personal information and medical records of more than 3.75 million people in a data breach at health data giant CareCloud, the company has confirmed with federal regulators. The disclosure marks the first confirmation of the scale of the data breach, which is now confirmed to be the fifth-largest theft of health data in 2026 so far. CareCloud detailed the March data breach in a filing with the Department of Health and Human Services (HHS) on Monday. The number of affected victims was reportedly revised up in an update on Tuesday, though it’s unclear if the figure is expected to rise further. The New Jersey-based tech company provides electronic medical record storage to tens of thousands of healthcare providers around the United States, consequently serving millions of patients. CareCloud handles a large amount of patient data and billing information on behalf of hospitals, doctor’s offices, and other medical practices. CareCloud has not publicly commented