CareTracker, Inc., a U.S.-based cloud provider of electronic health record (EHR) and practice management software for healthcare providers, disclosed a data breach on August 18, 2025, to the U.S. Department of Health and Human Services. The incident exposed sensitive personally identifiable information (PII) and protected health information (PHI) of thousands of patients, including names, contact details, dates of birth, Social Security numbers, driver’s license/state ID numbers, health insurance details, medical records, and payment information. The breach affected small and mid-sized medical practices using CareTracker’s platform, with potential consequences including identity theft, financial fraud, and unauthorized access to medical histories. While the exact number of impacted individuals remains undisclosed, the scale is believed to be significant. Affected parties are advised to monitor financial accounts, enroll in credit protection services, and seek legal recourse for potential compensation due to emotional distress, lost time, and out-of-pocket expenses resulting from the exposure.