Was It Breached Secria

Recent breaches

CareCloud data breach: the letter, and what to do before 17 December

CareCloud provides electronic health records to healthcare organizations. Its report to federal health regulators covers 3,756,469 people, as of 29 October 2026.1,2

Return Mail Processing
7 Clyde Road
Somerset, NJ 08873

Enrollment Code: Code
Enrollment Deadline: December 17, 2026

Dear Full name:

... CareCloud is a leading healthcare solutions provider, offering electronic health records and other clinical documentation services to certain healthcare organizations.

... the affected data may have included your full name and one (1) or more of the following: Breached elements

... calling (866) 329-9984, going to https://app.idx.us/account-creation/protect, or scanning the QR image ...

  1. The return addressThe filed sample comes from "Return Mail Processing" in Somerset, New Jersey, not from CareCloud's own name.2
  2. The deadline17 December 2026 to enroll in the free IDX protection, printed at the top of the letter.2
  3. Why CareCloud has your dataA healthcare organization you use ran its health records system, so you may never have dealt with it directly.2
  4. The enrollment siteType it in yourself, with the enrollment code from your letter. IDX's line is (866) 329-9984.2

Drawn from the sample letter CareCloud filed with California's attorney general. Checked 29 October 2026 against the sources.

The facts, as filed

"The company says" marks CareCloud's own account. A listing here isn't a finding that the company was at fault.

What happened
The company says an unauthorized third party accessed one of its AWS cloud environments between 10 and 16 March 2026 and claimed to have taken data from databases in it. It found the incident on 16 March, when a network disruption hit one of its health record environments.2
People affected
3,756,469 in CareCloud's report to the HHS breach portal, filed 24 July 2026, as of 29 October 2026.1 Its Texas filing, published 18 August 2026, counts 270,529 Texans.3
What leaked
Varies by person: the letter fills in each person's list. The Texas filing covers names, addresses, Social Security, driver's license and other ID numbers, financial account details, medical and health insurance information, and dates of birth.2,3
Monitoring offer
12 or 24 months of IDX credit and CyberScan monitoring, a $1,000,000 insurance reimbursement policy and identity theft recovery, with enrollment by 17 December 2026.2
First disclosure
CareCloud told the SEC on 27 March 2026 that the 16 March disruption hit one of six health record environments for about eight hours, and that it had judged the incident material on 24 March.4
Lawsuit
As of 29 October 2026 we found no court-approved settlement, and no filed lawsuit we could read in a court record or company filing.

Six days in March, a deadline in December

The dates come from CareCloud's letter and its filings.

  1. Unauthorized access begins, the company says.2

  2. A network disruption, and CareCloud finds the incident.2

  3. CareCloud reports it to the SEC as material.4

  4. Report filed with HHS: 3,756,469 people.1

  5. Last day to enroll in the IDX protection.2

What to do if you got a CareCloud letter

Match the steps to the data your letter lists. The full checklist covers every data type.

  1. Enroll in IDX by 17 December 2026.IdentityTheft.gov says to accept free credit monitoring when a company offers it. The monitoring must be activated to work, the letter says.5,2
  2. Social Security number listed: freeze your credit.While a freeze is in place, nobody can open a new credit account in your name. It's free to place and to lift.5
  3. Bank or card details listed: call the bank.Use the number on your card or statement. IdentityTheft.gov says to close the account or get a new card.5
  4. Insurance details listed: call your insurer.Report it and ask for a new card if needed. For Medicare, call 1-800-MEDICARE (1-800-633-4227).5

Questions people ask

Is the CareCloud Return Mail Processing letter real?

The sample CareCloud filed with California's attorney general comes from Return Mail Processing, 7 Clyde Road, Somerset, NJ 08873, with an enrollment code and the 17 December 2026 deadline at the top, and IDX enrollment at app.idx.us.2 If yours differs, contact your doctor or clinic on a number you look up yourself.5

What details were in the CareCloud breach?

Your letter lists yours: the sample fills in "one (1) or more" data types per person.2 Across everyone, CareCloud's Texas filing names Social Security, driver's license and financial account numbers, medical and insurance information, addresses and dates of birth.3

Is there a CareCloud data breach settlement or lawsuit?

We found no court-approved settlement and no filed lawsuit we could read as of 29 October 2026. A real settlement comes with a court-approved notice that names the case. This isn't legal advice.

Sources 5
  1. Breach Portal: HIPAA cases currently under investigation, U.S. Department of Health and Human Services, Office for Civil Rights. Full list exported as CSV. Read 29 October 2026.
  2. CareCloud, Inc.: filing and sample notice (reported 25 July 2026), California Attorney General. Read 29 October 2026.
  3. Data Security Breach Reports, Office of the Texas Attorney General. CareCloud, Inc., published 18 August 2026. Read 29 October 2026.
  4. Form 8-K, Item 1.05, filed 27 March 2026, CareCloud, Inc., via SEC EDGAR. Read 29 October 2026.
  5. What To Do if Your Information Was Lost or Stolen, or Part of a Data Breach, IdentityTheft.gov, Federal Trade Commission. Read 29 October 2026.

Every breach is checked against the company's own notice and a government record, and every source shows the day we read it. How we check