HackingHealthcareTechnologyHealthcareStolen CredentialsCapture Stored DataData ExfiltratedData EncryptedCustomer Data InvolvedIdentity (basic)Government IDHighContained

CareCloud, Inc.

bd_761c52aedc1f3201 · schema v1 · pii pii-v1

Severity

High

Discovered

Mar 16, 2026

Filed

Aug 6, 2026

To disclose

20 weeks

Affected

24,153state residents only

Linked

10 records

Confidence

64%

Full breach record for CareCloud, Inc. →2 incidents on file

CareCloud, Inc. disclosed a security incident affecting its CareCloud Health division. Between March 10 and March 16, 2026, an unauthorized third party accessed an AWS environment and exfiltrated data. CareCloud detected the incident on March 16, 2026, engaged forensic investigators, and reported the matter to law enforcement. On June 24, 2026, CareCloud determined that affected data included names and potentially government identifiers (SSN, driver's license). The incident is contained, and CareCloud is offering identity theft protection services to affected individuals.

J jump to incidentP pin to compareR raw source

South Carolina clock✓ SC CRA notice due20 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 6 days

discovery → filing · 20 weeks / 143 days

Mar 10, 2026

Begins

Mar 16, 2026

Discovered

Aug 6, 2026

Filed

vs. sector median

+11 wks slower

This filing is one of 10 records about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (8) · sorted by filing gap

Oregon State AGbd_42df04e823fae0162026-08-04 · +2dVerified
New Hampshire State AGbd_1e42ced8f1d65dd92026-07-31 · +6dVerified
Texas State AGbd_5be63a5d95dd65f12026-07-28 · +9dVerified
Massachusetts State AGbd_a0ddde8d6666ff312026-07-25 · +12dVerified

Show 4 more filings ↓up to 132d gap

California State AGbd_c48fbacd970b0fb72026-07-25 · +12dVerified
HHS OCRbd_3b7e00e7a7706e032026-07-24 · +13dVerified
Washington State AGbd_ace296eeb27ef3e52026-07-24 · +13dCandidate
SEC 8-Kbd_5d230f4ceefa826c2026-03-27 · +132dVerified by operator

Press reports (1)

Pressbd_7b45c93daf45a5c62026-03-16 · +143dVerified by operator

Name: CareCloud, Inc.
norm: carecloud
Domain: carecloud.com

Name: CareCloud, Inc.
norm: carecloud
Domain: carecloud.com
Industry: HealthcarellmTechnologyllm

Discovered: Mar 16, 2026
Breach occurred: Mar 10, 2026 – Mar 16, 2026
Undetected for: 6 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 24,153state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Reported the matter to the appropriate law enforcement authorities
Initial access: exploit_public_facing

During the incident: Engaged a leading cyber response advisory team experienced in handling these types of incidents, to assist with securing the environment, and conduct a comprehensive forensic investigation
Reported the matter to the appropriate law enforcement authorities
Changes made: Secured the affected environment
Eliminated the threat
Confirmed that no persistent unauthorized access remained
Continuing to strengthen the security of its systems and environments
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 20 weeks(143 days from discovery to filing)
Compliance flags: SC CRA notice due
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 8 states

View merged incident ↗

SEC 8-KMar 27 · first

HHS OCR+119d

Washington State AG+119d

Massachusetts State AG+120d

California State AG+120d

Texas State AG+123d

New Hampshire State AG+126d

Oregon State AG+130d

South Carolina State AG+132d · this page

Pattern: first filing Mar 27, last Aug 6 (SC) — a 132-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://consumer.sc.gov/sites/consumer/files/Documents/Security%20Breach%20Notices/2026/Consumer%20Letter%20-%20CareCloud%2C%20Inc..pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 6, 2026
Raw hash: 0f5a6670e8ebffcc8d2e694d731184b0abeb783b433a3afcf7a2a7233da04c91

Linked disclosures

Regulatory filings (8) · sorted by filing gap

Press reports (1)

Reporting entityCareCloud, Inc.

Victim entityCareCloud, Inc.

Incidentdiscovered Mar 16, 2026

Stated responseEngaged a leading cyber response advisory team experienced in handling these types of incidents, to assist with securing the environment, and conduct a comprehensive forensic investigation

ComplianceSC CRA notice due

Extraction provenanceno artifact recorded

Source provenanceconsumer.sc.gov