Health data giant CareCloud says hackers accessed patients' medical records

CareCloud has confirmed that hackers accessed one of its stores of patients electronic health records during a data breach earlier this month. The disclosure filed with the U.S. Securities and Exchange Commission last Friday said the company detected unauthorized access on March 16 to one of six environments where it stores patients medical and healthcare records. The hackers had access to this medical records storage for more than eight hours the company said. It is not yet known if the hacker exfiltrated any data or what types of data may have been stolen if so. The health tech giant said it believes the hackers are no longer in its network after restoring its systems the same day and has called in an unspecified cybersecurity company to investigate. CareCloud did not say how many people were affected by the breach. The company provides healthcare technology including electronic health records storage for more than 45,000 providers including doctors and physicians at thousands of hospitals and medical practices covering millions of patients according to the companys annual report to investors filed earlier in March. CareCloud said in its SEC disclosure that it determined on March 24 that the incident was significant enough to have a material impact on its business and was legally required to alert its investors. The company said the breach is unlikely to affect the companys financial position but conceded that its investigation remains under way. It is not clear if the recent cyberattack on CareCloud resulted in any data destruction or if the hackers have contacted the company with any demands. A spokesperson for CareCloud did not respond to a request for comment.