Fox News Flash top headlines are here. Check out what's clicking on FoxNews.com.
You can be careful with your passwords and still get caught in a breach at a company you may have never heard of. That is one of the frustrating parts of the CareCloud data breach. More than 3.75 million people had personal information and medical records stolen after hackers gained access to a CareCloud cloud environment earlier this year.
CareCloud provides electronic medical record technology and other services to tens of thousands of healthcare providers across the U.S. So, even if you never created a CareCloud account, a doctor's office or another healthcare provider could have used its technology to handle your information. Now, we are getting a much clearer picture of just how much information hackers took.
Missed CyberGuy LIVE? Watch the Protect Your Money replay
Our free CyberGuy LIVE class, Protect Your Money From Today’s Biggest Threats , has ended, but you can still watch the full replay and download our financial protection checklist. Kurt "CyberGuy" Knutsson walks you through five simple ways to help defend yourself against AI scams, fraud, identity theft and financial hacks. You’ll learn how to set up bank alerts, strengthen your account logins, protect your phone number, freeze your credit and help secure your retirement savings against unauthorized transfers. No technical experience is needed.
Get the free replay and checklist now at CyberGuyLive.com
INSURANCE BREACH EXPOSES 7M DRIVER'S LICENSES
Healthcare providers rely on digital systems to store and manage sensitive patient information, making security a critical part of protecting medical records. (Kurt "CyberGuy" Knutsson)
The cyberattack dates back to March 2026. According to a breach notice filed with the California Attorney General, CareCloud experienced a network disruption on March 16. The company brought in outside cybersecurity experts to investigate. CareCloud later determined that an unauthorized third party had access to one of its Amazon Web Services environments between March 10 and March 16, 2026.
The company said the attacker claimed to have taken data from databases inside that environment. CareCloud also said it found no evidence of continued unauthorized activity after March 16. Early disclosures showed hundreds of thousands of people were affected. However, that figure later climbed dramatically. CareCloud has now reported that more than 3.75 million people were affected, according to federal health regulators. The disclosure places the incident among the largest healthcare data breaches reported so far in 2026.
Here is where this breach becomes especially concerning. The stolen information goes well beyond an email address or phone number. What was exposed varies from person to person, but the data may include:
Think about how much a criminal can learn from that combination. A Social Security number can help fuel identity theft. Banking information could put financial accounts at risk. Medical records can also give criminals deeply personal details that make phishing emails and scam calls far more convincing. Then there is another threat many people rarely think about: medical identity theft.
MEDICAL IDENTITY THEFT FOLLOWS YOU INTO THE DOCTOR'S OFFICE
Data breaches can expose far more than passwords, including Social Security numbers, financial details and deeply personal health information. (Kurt "CyberGuy" Knutsson)
You can change a password after a breach. Your medical history is much harder to replace. A criminal could use stolen insurance or personal information to seek medical care under someone else's identity. Fraudulent claims can also appear under a victim's health insurance.
