CareCloud confirms EHR environment breach

Healthcare software firm CareCloud has disclosed the potential compromise of individuals' health records following the eight-hour breach of one of its EHR record environments, according to The Record, a news site by cybersecurity firm Recorded Future.

In a filing with the U.S. Securities and Exchange Commission, CareCloud said that it is assessing "whether, and the extent to which, patient information or other data was accessed or exfiltrated, and the categories and volume of any such data."

Initially, CareCloud notified the authorities of the breach but later filed a notification to the SEC after officials "determined that the incident is material in light of the sensitivity of the potentially affected information and the potential consequences of the incident."

Insurance firms that handle patient information and tech companies that provide software and tools to healthcare providers were targeted by many significant breaches reported this year. Episource, TriZetto Provider Solutions, and Insightin have previously reported incidents that affected millions of people.