CareCloud has disclosed that hackers gained unauthorized access to a system containing electronic health records earlier this month, according to a filing with the U.S. Securities and Exchange Commission.
The company said it detected the intrusion on March 16, when attackers accessed one of six environments used to store patient medical data. The unauthorized access lasted more than eight hours.
Scope Of Access And Ongoing Investigation
CareCloud said it has not yet determined whether any data was exfiltrated or what types of information may have been accessed. The company restored affected systems the same day and said it believes the attackers are no longer present in its network.
An external cybersecurity firm has been engaged to investigate the incident.
The company did not disclose how many individuals may have been affected. CareCloud provides electronic health record services to more than 45,000 healthcare providers across hospitals and medical practices, covering millions of patients.
Infrastructure And Data Storage
Public records indicate that much of CareCloud’s data infrastructure is hosted on Amazon Web Services.
The company has not detailed how patient data is distributed across its six environments or whether some systems are used as backups.
Regulatory Disclosure And Business Impact
CareCloud said it determined on March 24 that the breach could have a material impact on its business, triggering a requirement to notify investors.
The company said it does not expect the incident to materially affect its financial position, though the investigation is ongoing.
Context Of Healthcare Cyber Threats
Electronic health record systems are frequent targets for cybercriminals due to the value of medical and personal data. In 2024, attackers compromised a large portion of U.S. health records during a ransomware attack on Change Healthcare, causing widespread service disruptions.
It remains unclear whether the CareCloud incident involved ransomware, data destruction, or any communication from the attackers.
Featured image credits: MedSafe
For more stories like it, click the +Follow button at the top of this page to follow us.