Health data giant CareCloud says hackers accessed patients’ medical records

CareCloud confirmed an unauthorized access event on March 16 affecting one of six environments that store patients' electronic health records; attackers had access for over eight hours. The company restored systems the same day, retained an external cybersecurity firm to investigate, and disclosed the incident to the SEC, but has not determined whether data was exfiltrated. CareCloud provides services to over 45,000 providers and millions of patients, so the breach could have broad impact if records were compromised.