Healthcare data breaches at AdaptHealth and CareCloud expose millions of records

Two major healthcare-related data breaches have been reported, affecting millions of individuals.

AdaptHealth, LLC reported a breach to the Vermont Attorney General’s Office that has exposed the health records of at least 48,090 Vermonters. This figure represents approximately 7.5 percent of the state's population and accounts for 57 percent of all breaches reported to the state office since April 17, 2026. The company, which provides durable medical equipment such as oxygen concentrators and mobility aids, noted that the current count may rise as investigations continue.

Separately, healthcare software firm CareCloud informed federal regulators that a hacker accessed one of its electronic health record environments in March. The breach, which lasted approximately eight days, impacted 3,756,469 people. Stolen data includes Social Security numbers, credit and debit card information, and medical and insurance data. Affected individuals include residents from several states, including Texas, South Carolina, and Oregon.