Healthcare tech firm CareCloud confirms patient record system hack

Healthcare IT firm CareCloud has confirmed that its systems storing patient records were accessed in a hacking attack. The breach occurred on March 16, and attackers reportedly remained inside the system for over eight hours. In filings with the U.S. Securities and Exchange Commission (SEC), CareCloud disclosed that the compromised system was one of several environments used to store patient records.

The company stated that system functionality and data accessibility were restored on the day of the breach, and confirmed that attackers are no longer present within the system. It added that the incident was confined to that specific environment and did not impact other platforms.

While CareCloud confirmed hackers accessed its electronic health record (EHR) system, the company has not specified whether actual patient data was exfiltrated or what information was compromised. An investigation is underway to determine the extent of the damage.

CareCloud serves over 45,000 healthcare providers nationwide and processes millions of patient records.