CareCloud, a leading health tech data provider, disclosed that hackers accessed patient records in one of its protected data stores.
The breach involved sensitive medical information, including diagnoses, treatments, and personal identifiers.
In a public statement, CareCloud said it began notifying hundreds of thousands of impacted customers.
The company confirmed it activated its incident response plan and is working with cybersecurity specialists to contain the breach.
Investigators are examining how attackers gained access, with preliminary findings pointing to a compromised credential.
CareCloud indicated it will cooperate with the Department of Health and Human Services, as required by state and federal privacy regulations.
Affected patients will receive guidance on monitoring for identity theft and steps to protect their health data.
The firm emphasized that it has implemented multi-factor authentication and continuous monitoring across all data centers.
This incident follows a series of high‑profile breaches in the health sector, underscoring the need for robust cybersecurity.
CareCloud pledged to provide updates as the investigation proceeds and to strengthen safeguards against future attacks.