345,000 Americans Warned Following CareCloud AWS Breach, Sensitive Personal, Financial and Medical Records at Risk

A major healthcare technology firm has started sending notifications to hundreds of thousands of patients about the theft of their medical records and personal details.

The New Jersey company CareCloud, which supports patient records for more than 45,000 providers nationwide, confirmed unauthorized access to one of its electronic health record databases hosted on Amazon Web Services, reports TechCrunch.

In its March disclosure, CareCloud said that an unauthorized entity had temporary access to its system. The firm said the incident was contained on the day it was discovered.

CareCloud believes that it has sufficient cybersecurity insurance coverage for any potential losses.

The data breach impacts at least 345,000 individuals in the country so far, with the total expected to grow as more state filings appear.

Compromised information includes names, addresses, Social Security numbers, passports, driver’s licenses, bank account records, payment card numbers and detailed health records.

The firm has remained largely silent about the incident since its initial March disclosure, and no ransomware group has publicly claimed responsibility.

This event adds to a wave of healthcare breaches this year that have exposed millions of records across multiple providers.