This is one outlet's own report from Fox News — the article as it was filed.
AIPROPX ReportFox News · 1h ago
Healthcare data breach exposes 3.75M patient records
You can be careful with your passwords and still get caught in a breach at a company you may have never heard of. That is one of the frustrating parts of the CareCloud data breach. More than 3.75 million people had personal information and medical records stolen after hackers gained access to a CareCloud cloud environment earlier this year.
CareCloud provides electronic medical record technology and other services to tens of thousands of healthcare providers across the U.S. So, even if you never created a CareCloud account, a doctor's office or another healthcare provider could have used its technology to handle your information. Now, we are getting a much clearer picture of just how much information hackers took.
Missed CyberGuy LIVE? Watch the Protect Your Money replay
Our free CyberGuy LIVE class, Protect Your Money From Today’s Biggest Threats , has ended, but you can still watch the full replay and download our financial protection checklist. Kurt "CyberGuy" Knutsson walks you through five simple ways to help defend yourself against AI scams, fraud, identity theft and financial hacks. You’ll learn how to set up bank alerts, strengthen your account logins, protect your phone number, freeze your credit and help secure your retirement savings against unauthorized transfers. No technical experience is needed.
Get the free replay and checklist now at CyberGuyLive.com
INSURANCE BREACH EXPOSES 7M DRIVER'S LICENSES
The cyberattack dates back to March 2026. According to a breach notice filed with the California Attorney General, CareCloud experienced a network disruption on March 16. The company brought in outside cybersecurity experts to investigate. CareCloud later determined that an unauthorized third party had access to one of its Amazon Web Services environments between March 10 and March 16, 2026.
The company said the attacker claimed to have taken data from databases inside that environment. CareCloud also said it found no evidence of continued unauthorized activity after March 16. Early disclosures showed hundreds of thousands of people were affected. However, that figure later climbed dramatically. CareCloud has now reported that more than 3.75 million people were affected, according to federal health regulators. The disclosure places the incident among the largest healthcare data breaches reported so far in 2026.
Here is where this breach becomes especially concerning. The stolen information goes well beyond an email address or phone number. What was exposed varies from person to person, but the data may include:
Think about how much a criminal can learn from that combination. A Social Security number can help fuel identity theft. Banking information could put financial accounts at risk. Medical records can also give criminals deeply personal details that make phishing emails and scam calls far more convincing. Then there is another threat many people rarely think about: medical identity theft.
MEDICAL IDENTITY THEFT FOLLOWS YOU INTO THE DOCTOR'S OFFICE
You can change a password after a breach. Your medical history is much harder to replace. A criminal could use stolen insurance or personal information to seek medical care under someone else's identity. Fraudulent claims can also appear under a victim's health insurance.
In some cases, incorrect treatment or medical information could eventually make its way into someone's records. That creates problems that can extend beyond financial fraud. The Federal Trade Commission advises people who suspect medical identity theft to review their medical records and insurance statements. Look closely for unfamiliar treatments, providers, prescriptions or charges. We recently covered this growing problem in Medical identity theft follows you into the doctor's office.
CareCloud says it brought in outside cybersecurity specialists after discovering the incident. The company also reported the attack to law enforcement and secured the affected environment. According to its breach notice, investigators found no continued unauthorized access after the incident was contained.
CareCloud has also offered affected individuals complimentary identity protection services through IDX. If you received a notification letter, check it carefully for enrollment instructions and the amount of time you have to sign up.
CyberGuy reached out to CareCloud for comment, but we did not hear back before our deadline.
A breach involving Social Security numbers, medical records and financial information deserves your attention even if you have not noticed anything suspicious yet. Here are the steps I recommend taking.
Start with the letter or notification you received. Look for the specific types of information CareCloud says were involved in your case. Not every affected person necessarily had the same information exposed. If you were offered free identity protection or credit monitoring, review the terms and enrollment deadline. Consider signing up while the service remains available.
If your Social Security number was exposed, consider freezing your credit with Equifax, Experian and TransUnion. A credit freeze limits access to your credit file. That can stop many criminals from opening new credit accounts in your name. Federal law allows you to freeze and unfreeze your credit for free. However, a credit freeze cannot block every form of identity theft. Someone could still attempt to take over an existing account or misuse your personal information in other ways. For a deeper look at those limitations, read Why a credit freeze isn't the end of identity theft.
Keep an eye on your bank accounts, credit cards and credit reports. Look for purchases you do not recognize, unfamiliar credit inquiries or accounts you never opened. If something looks suspicious, contact the bank or financial institution directly. Use the phone number printed on your card or listed on the company's official website. Be wary of anyone who unexpectedly contacts you and claims th...
HealthcareThe CareCloudSocial SecurityCareCloudMoreU.SNowProtect Your MoneyCyberGuy LIVEProtect Your Money From Today’s Biggest ThreatsKurtCyberGuy
AIPROPX is an independent multi-source news index — we track, compare, and connect coverage from across the web into one place you won't find anywhere else.
