Cognizant and CareCloud report major data breaches

Two major data breaches have been disclosed involving Cognizant and CareCloud, exposing sensitive personal and medical information.

Cognizant, a US-headquartered IT services firm, notified customers of a breach occurring on April 21, 2026. The company stated there is no current evidence that the data has been misused, but the incident may have exposed Social Security numbers and other personal details. A cybercrime group known as CoinbaseCartel has reportedly claimed responsibility. Cognizant is offering affected individuals identity theft protection services through IDX, including 24 months of credit monitoring and an insurance reimbursement policy of up to $1 million.

CareCloud, a healthcare technology provider, confirmed a breach that impacted approximately 3.75 million people. The intrusion occurred in an Amazon Web Services environment between March 10 and March 16, 2026. The stolen data includes full names, dates of birth, Social Security numbers, medical records, health insurance information, and, for some victims, bank account details and credit card information. This incident marks one of the largest healthcare-related data exposures reported this year.