CareCloud, Inc.
bd_ace296eeb27ef3e5 · schema v1 · pii pii-v2
Full breach record for CareCloud, Inc. →2 incidents on fileCareCloud, Inc., a health sector entity reported a unauthorized access incident to the Washington Attorney General. The organization became aware of the incident on 2026-03-16 and filed notice on 2026-07-24. 20,706 Washington residents were affected. 130 days elapsed between awareness and notification. 6 days to identify the breach. 0 days to contain the breach.
J jump to incidentP pin to compareR raw source
Incident timeline
Mar 16, 2026
Discovered
Jul 24, 2026
Filed
vs. sector median
+11 wks slower
Linked disclosures
Why this link?Regulatory filings (9) · sorted by filing gap
- HHS OCRbd_3b7e00e7a7706e032026-07-24Verified
- Massachusetts State AGbd_a0ddde8d6666ff312026-07-25 · +1dVerified
- California State AGbd_c48fbacd970b0fb72026-07-25 · +1dVerified
- Texas State AGbd_5be63a5d95dd65f12026-07-28 · +4dVerified
Show 5 more filings ↓Show fewer ↑up to 130d gap
- New Hampshire State AGbd_1e42ced8f1d65dd92026-07-31 · +7dVerified
- Oregon State AGbd_42df04e823fae0162026-08-04 · +11dVerified
- South Carolina State AGbd_761c52aedc1f32012026-08-06 · +13dVerified
- SEC 8-Kbd_5d230f4ceefa826c2026-03-27 · +119dVerified by operator
- Pressbd_7b45c93daf45a5c62026-03-16 · +130dVerified by operator
Filing propagation · 10 filings · 8 states
View merged incident ↗Pattern: first filing Mar 16, last Aug 6 (SC) — a 143-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.