A security incident at CareCloud, a healthcare software provider, may have exposed patient names, dates of birth, Social Security numbers, health insurance information, and medical records. If you received a data breach notification letter from CareCloud, our data breach lawyers want to hear from you.

What Happened?

According to a notice filed with the Massachusetts AG Office, CareCloud experienced a security incident affecting one of the environments used to store electronic medical records. The incident occurred on March 16, 2026. Information potentially exposed in the breach reportedly included names, dates of birth, Social Security numbers, health insurance information, and medical records. Affected individuals are being notified in accordance with federal law. Because CareCloud supports more than 45,000 healthcare providers, the number of patients whose data may be affected could be significant. A forensic investigation is underway to determine whether patient data was accessed or removed.

If you are a patient who received care from a provider that uses CareCloud, you may be entitled to compensation. Fill out the form below to see if you qualify.

Steps To Take If You Were Affected

1. Monitor your credit reports and financial accounts for suspicious activity
2. Consider placing a fraud alert or credit freeze with all three major credit bureaus
3. Be alert to phishing emails or calls referencing the breach
4. Change passwords on any affected accounts and enable two-factor authentication
5. Keep a copy of your data breach notification letter for your records