Healthcare IT company CareCloud has revealed a data security incident where private information was accessed, causing their network to be down for around eight hours.

The New Jersey-based organization stated in a filing with the SEC that the breach happened on March 16 when hackers gained unauthorized entry to its IT systems.

“On March 16, 2026, CareCloud, Inc. had a brief network outage in its CareCloud Health sector that partially affected the functionality and data accessibility of 1 out of 6 of its electronic health record systems for about 8 hours, until the Company completely restored all functionality and data access that evening,” the company wrote in the SEC document.

Upon discovering the breach, CareCloud mentioned that they informed “their cybersecurity insurer and hired a top cyber incident response team, associated with a major accounting firm, to carry out external cybersecurity tasks and help secure the environment, as well as to conduct a detailed IT forensic investigation to learn the nature and scope of this incident.”

CareCloud provides cloud-based software, revenue cycle management, practice management, improving patient experience, and EHR services as a public healthcare IT company.

While the unauthorized data access was narrow in scope, CareCloud has confirmed that one of their platforms containing patient health information was breached, based on initial investigation results.

The number of people affected remains unknown. The company specified that they have launched an investigation to identify what types of data were accessed and/or stolen.

BleepingComputer has contacted CareCloud for comments and will update the article as soon as they respond.

In the meantime, CareCloud emphasized that other platforms, sectors, systems, or environments were not affected, and assured that the attacker no longer has database access.

All involved systems have been fully recovered, and the company is collaborating with external cybersecurity specialists to enhance its security to avoid repeat incidents.

BleepingComputer has not found any ransomware organization who is claiming accountability for the attack on CareCloud.