CareCloud has begun notifying hundreds of thousands of people after hackers accessed and allegedly stole medical records from one of the US health technology company’s data stores in March. The breach matters because CareCloud supports more than 45,000 healthcare providers and holds highly sensitive health, identity and financial information, leaving affected individuals at risk of fraud and privacy harm.

Hackers had access to the electronic health record store for at least six days, from 10 to 16 March, and CareCloud says they claimed to have removed database data. At least 345,000 people are affected so far, although the total may rise; stolen information included names, addresses, Social Security and identity-document numbers, bank and payment-card details, and medical data. The incident follows several major healthcare-sector breaches this year, including attacks affecting TriZetto and NYC Health + Hospitals.