CareCloud notifies the SEC after attack on one of its EHR environments

CareCloud reported that on March 16 an unauthorized third party temporarily accessed and partially disrupted one of its six electronic health record environments for roughly eight hours; access and functionality were fully restored the same evening. The company engaged a Big Four-affiliated cyber response team, notified its insurer and law enforcement, and is investigating whether patient information was accessed or exfiltrated; no attribution or confirmed data loss has been reported to date.