Head over to your TikTok DMs to try out this hidden game.

Head over to your TikTok DMs to try out this hidden game.

TikTok has discreetly introduced a hidden emoji game accessible through your DMs. The game’s objective is straightforward: bounce as high as possible by jumping on alligators using your finger. Steer clear of the skeleton alligators, and watch out — broken alligators vanish after just one landing, so you must swiftly jump to the one above.

If you direct your jump toward a floating emoji, you’ll receive a speed boost that aids your ascent. The same applies when you land on an alligator equipped with a propeller. If you miss landing on an alligator or land on a skeleton, it’s game over. The aim of the game is to achieve a higher bounce than your rival. While playing, you’ll see both your score and your opponent’s highest score displayed in the top-right corner.

TikTok informed TechCrunch on Tuesday that the game is globally available and can be played in both individual DMs and group chats.

Image Credits:TechCrunch/Screenshot

To play the game, send an emoji in any chat and click on it to start. The emoji you select will be the one that floats on the screen to provide you with a boost. You can choose any emoji, but the game can only be accessed by sending a single emoji at a time.

TikTok states that this Easter egg was introduced to enhance the messaging experience and incorporate a fun competitive aspect into DMs on the platform.

With this rollout, TikTok is emulating Instagram’s strategy. Instagram launched its own hidden emoji DM game two years ago, and TikTok’s version mirrors a similar idea. In Instagram’s game, players use their finger to move a paddle to keep an emoji bouncing, with the game concluding when the emoji falls.

TikTok is not the sole social media platform trying out DM games. Meta confirmed to TechCrunch in January that Threads is looking into chat games. The company is internally testing a basketball game that allows users to virtually shoot hoops by swiping their finger.

Techcrunch event

San Francisco, CA
|
October 13-15, 2026

Caller ID application Truecaller reaches 500 million monthly active users.

Caller ID application Truecaller reaches 500 million monthly active users.

The caller ID application Truecaller, rooted in Sweden, announced on Tuesday that it has achieved the significant milestone of 500 million active users every month on its platform. The company also reported surpassing 150 million users outside of India, which remains its largest market with over 350 million monthly active users.

According to the company, it gained 50 million users in 2025, and its overall user base has doubled over the last five years. In April 2025, Truecaller stated it had accumulated more than 450 million users. Additionally, the company highlighted that upwards of 4 million individuals are subscribed to its premium plans.

“Increasing numbers of individuals require assistance in handling spam, scams, and uninvited communications daily,” remarked Truecaller CEO Rishit Jhunjhunwala in a statement. “Achieving 500 million users illustrates the magnitude of that necessity and the confidence that people have in Truecaller to enhance communication safety.”

“Our commitment is centered on perpetually enhancing Truecaller with advanced technology and innovative features that safeguard users before, during, and after every call or message. Ultimately, our goal is to create a more secure and trustworthy communication environment for all. We are now focusing on the next target: 1 billion users,” he further added.

In recent years, Truecaller has been focusing on broadening its offerings beyond caller identification. Recently, the company introduced a feature that allows one individual to become an administrator and terminate calls for family group users to prevent scams. Truecaller has also been exploring the use of AI for call screening and responses.

Truecaller informed TechCrunch last month that it is also trialing an AI feature capable of automatically monitoring disconnected calls when specific scam-related terms, like “digital arrest,” are identified. This tactic involves fraudsters masquerading as law enforcement officers to extract sensitive information or funds from the callers.

In India, the company is encountering obstacles from the nation’s Caller Name Presentation (CNAP) system, which showcases the name of the caller as registered with their telecom providers.

Techcrunch event

San Francisco, CA
|
October 13-15, 2026

The social gaming platform Rec Room, previously valued at $3.5B, is closing down.

The social gaming platform Rec Room, previously valued at $3.5B, is closing down.

Rec Room, once recognized as a burgeoning leader in the social gaming sector, declared on Monday that it will terminate its platform on June 1. 

For those who cherish the platform or have enjoyed crafting or exploring its virtual landscapes, this announcement likely comes as a blow. Over time, Rec Room drew in over 150 million users, establishing itself as a prime destination for social gaming, particularly during the pandemic when many sought online connections. 

Established in 2016 by Nick Fajt and Cameron Brown, Rec Room gained notable interest and funding, achieving a valuation of $3.5 billion in December 2021. 

However, despite the vast player base, Rec Room faced challenges in finding a viable revenue model. Expenses soared, and the income couldn’t keep pace. Even with a robust community and innovative features like Maker AI for game development, the financial situation deteriorated, resulting in considerable layoffs earlier this year. 

“We invested a significant amount of time trying to make the numbers feasible,” the company stated in its announcement on Monday. “But with the recent changes in the VR market, alongside wider challenges in gaming, reaching profitability has become difficult enough that we’ve taken the hard step to close down.” 

Effective immediately, no new accounts or friend requests will be permitted. Creators will not be able to distribute monetized content, and the platform will cease operations at 12 p.m. PT on June 1.

Alexa+ introduces enhanced food ordering experiences through Uber Eats and Grubhub

Alexa+ introduces enhanced food ordering experiences through Uber Eats and Grubhub

Amazon has introduced an upgrade to Alexa+, its next-gen AI assistant, enabling users to order food from popular delivery platforms like Uber Eats and Grubhub in a conversational style, much like interacting with a server at a restaurant or making an order at a drive-thru, as stated by Amazon.

This latest Alexa+ functionality aims to foster a more intuitive and engaging ordering process. Beginning today, users can request a type of cuisine, browse menu selections, pose questions, and personalize their meals all in a single dialogue. Should users wish to modify their order midway, add a dessert, or change quantities, they can do so seamlessly. 

To utilize this feature, users must connect their Grubhub or Uber Eats accounts via the Alexa app. After linking, past orders will sync automatically, simplifying the process of reordering favorite dishes or exploring new eateries. Users can simply say, “I’d like to order Italian for delivery,” and Alexa+ will assist by presenting various restaurant choices. Once the order is finalized, users receive a detailed summary of the items in their cart, including amounts and prices. 

This innovative food ordering functionality is currently being rolled out to Alexa+ users with Echo Show 8 devices and beyond. Amazon articulates that this step represents a notable enhancement in the company’s objective to develop adaptive interaction models. This effort sets the stage for the potential expansion of similar features into other sectors, like grocery shopping and travel planning.

The Alexa+ enhancement arrives amidst the broader consequences of AI within the food sector. Fast food establishments have already begun employing AI assistants in drive-thrus, but challenges persist, particularly regarding order precision. In 2024, McDonald’s halted its initiative following a few errors, including an AI cashier inadvertently adding nine sweet teas to a customer’s order. Furthermore, Taco Bell encountered its own set of issues, with viral footage highlighting its AI making mistakes.

Since the launch of Alexa+ in the U.S. and its recent extension to the U.K., the features continue to evolve, with the introduction of new personality modes for Alexa, such as a “Sassy” option aimed at adults, alongside other styles including Brief, Chill, and Sweet. 

Whoop's worth has just surged to $10 billion.

Whoop’s worth has just surged to $10 billion.

Whoop, the wearable tech company focused on fitness and health monitoring, has successfully completed a $575 million Series G funding round at a valuation of $10.1 billion — nearly three times its previously reported valuation of $3.6 billion — in a deal involving sovereign wealth funds, leading health organizations, and some of the globe’s most famous athletes.

The funding round was spearheaded by Collaborative Fund and saw participation from Mubadala Investment Company, Qatar Investment Authority, 2PointZero Group, Abbott, Mayo Clinic, Macquarie Capital, IVP, Foundry Group, Accomplice, Affinity Partners, Glade Brook, B-Flexion, Promus Ventures, and Bullhound Capital. Notable individual investors include Cristiano Ronaldo, LeBron James, Rory McIlroy, Reggie Miller, and Niall Horan, alongside various other high-profile athletes and celebrities.

The company has accumulated around $900 million in total funding since its inception.

A significant player joining the cap table is Abbott, the prominent medical device company. Whoop’s founder and CEO Will Ahmed indicated that this partnership represents a larger initiative aimed at enhancing health and medical capabilities, though he mentioned there is “more to come” regarding that particular announcement.

This funding is timely as Whoop reaches several important business milestones, according to Ahmed. The company closed last year with a bookings run rate of $1.1 billion, reflecting a 103% increase year over year. In a conversation with TechCrunch last week, Ahmed emphasized why bookings should be the metric of focus: When you are distributing millions of hardware units globally while managing a subscription model, investors must comprehend the financial dynamics of simultaneously handling inventory, hardware expenses, and recurring revenue. It presents a more intricate scenario than a traditional software company, and bookings effectively encapsulate that complexity.

Regarding the future utilization of this capital, Ahmed mentioned priorities like talent acquisition and recruitment, elevating marketing and brand recognition, ongoing R&D investments, alongside expediting international growth.

The pressing question surrounding such a substantial funding round at this valuation: Is an IPO on the horizon? (Competing firm Oura is reportedly discussing plans with bankers for its own IPO this year.) Ahmed stated that the company is engaged in “a lot of the no-regrets work to be a public company,” but refrained from indicating any immediate intentions to go public.

Techcrunch event

San Francisco, CA
|
October 13-15, 2026

Considering that Whoop is a consumer brand with significant recognition among health-focused and performance-driven individuals, it’s the sort of enterprise that could spark genuine enthusiasm among retail investors whenever it opts to take that step. Meanwhile, Whoop has plenty of runway ahead and a much larger figure next to its name.

You can tune in to our comprehensive dialogue with Ahmed, where we also discussed the company’s foundational days, its extensive hiring strategy at present, and how Whoop is integrating AI into its operations. Alternatively, you may read about Whoop’s ambitious foray into healthcare and its implications for the brand here.

Uber and WeRide enhance robotaxi activities in Dubai

Uber and WeRide enhance robotaxi activities in Dubai

Uber and the Chinese autonomous vehicle firm WeRide have initiated robotaxi services without a human safety operator in Dubai, marking a significant expansion in the Middle East.

Users can now request these vehicles via Uber’s app, with services available in commercial and industrial zones such as Dubai Silicon Oasis, Dubai Investment Park Second, and Jabal Ali Industrial First, as well as suburban regions and the maritime trade center Al Hamriya Port. The service is managed locally by Tawasul, a fleet and mobility operator in the UAE.

The firms initially presented robotaxis in Dubai last December under a trial scheme, offering free rides and utilizing a human safety operator. Last month, the Roads and Transport Authority of the government issued a permit for the companies to trial driverless vehicles.

This launch indicates a significant advancement in WeRide’s robotaxi initiatives in the area and highlights Uber’s ongoing partnership with the firm. According to filings submitted to the U.S. Securities and Exchange Commission on Monday, Uber possesses a 5.82% interest in WeRide. Last year, Uber invested $100 million in WeRide, which places Uber’s equity stake at approximately $150 million based on WeRide’s stock closing price on Monday.

“Introducing fully autonomous vehicles to Dubai represents a critical step toward achieving global autonomous mobility,” stated Sarfraz Maredia, Uber’s global head of autonomous mobility and delivery. “This launch epitomizes our strong commitment to the UAE and our vision for a hybrid ecosystem—where drivers alongside AVs cultivate a more robust network. Particularly during trying times in the region, we take pride in being a partner to this city, ensuring that Uber remains a reliable option for seamless and confident transport.”

In May 2025, Uber expanded its investment in WeRide as part of a commercial robotaxi collaboration aimed at extending service to another 15 cities in the next five years. The companies have previously indicated that this expansion will encompass cities in Europe.

Through this partnership, WeRide’s robotaxi offerings can be accessed via the Uber app. This agreement is akin to Uber’s arrangement with Waymo, where Uber manages network routing and fleet operations, while the autonomous vehicle firm oversees the AV technology.

Correction March 31 at 12:15 p.m. PT: A previous version of this article mistakenly mentioned that Uber had increased its stake in WeRide. It also inaccurately stated the value of Uber’s equity stake in WeRide; it is approximately $150 million as of Monday.

North Korean cybercriminals accused of commandeering well-known Axios open source initiative to disseminate malware

North Korean cybercriminals accused of commandeering well-known Axios open source initiative to disseminate malware

A suspected hacker from North Korea has taken control of a widely used open source software development tool, modifying it to deploy malware that could endanger millions of developers.

On Monday, a hacker released malicious versions of the popular JavaScript library known as Axios, which developers depend on to enable their software’s internet connectivity. The compromised library was made available on npm, a repository for open source project code. Axios is downloaded by users tens of millions of times each week. 

The hijacking was detected and halted within approximately three hours from Monday night into Tuesday, as reported by the security firm StepSecurity, which investigated the incident. 

Cybercriminals are increasingly targeting developers of prominent open source projects to execute mass hacks against anyone relying on the compromised code, thereby potentially acquiring access to numerous affected devices. Such widespread breaches are labeled supply chain attacks because they exploit software that enables hackers to then compromise anyone who downloaded the tainted software. In recent times, attackers have focused on firms such as 3CX, Kaseya, and SolarWinds, in addition to open source tools like Log4j and Polyfill.io, to target extensive user bases.

Currently, it remains uncertain how many individuals downloaded the malicious variant of Axios within that timeframe. The security firm Aikido, which also looked into the incident, advised anyone who obtained the code to “assume their system is compromised.”

Google informed TechCrunch that its security analysts are associating the Axios breach with North Korean hackers.

“We have attributed the attack to a suspected North Korean threat actor we track as UNC1069,” stated John Hultquist, the chief analyst for Google’s Threat Intelligence Group. “North Korean hackers possess significant experience with supply chain attacks, which they have historically employed to steal cryptocurrency. The complete scope of this incident remains unclear, but due to the popularity of the compromised package, we anticipate it will have widespread consequences.”

Techcrunch event

San Francisco, CA
|
October 13-15, 2026

Contact Us

Do you have additional information regarding this hack? Or other supply chain attacks? From a non-work device, you can securely reach out to Lorenzo Franceschi-Bicchierai on Signal at +1 917 257 1382, or through Telegram, Keybase, and Wire @lorenzofb, or via email.

The hacker managed to insert malicious code into Axios by breaching the account of one of the project’s main developers, who had the authority to release updates. The hacker replaced the legitimate developer’s email address on the account with their own, complicating the process for the developer to regain access.

After taking control of the account, the hacker added harmful code intended to deliver a remote access trojan, or RAT — essentially malware that allows hackers complete, remote control over a victim’s machine. The hacker subsequently issued new versions of Axios disguised as a legitimate update for Windows, macOS, and Linux users. 

The hackers also programmed the malware, along with some of the code used for its delivery, to automatically erase itself post-installation in an effort to evade detection by anti-malware software and investigators, according to security experts.

Updated to include information from Google regarding the attribution to North Korea.

FedEx opts for alliances instead of proprietary technology in its automation approach

FedEx opts for alliances instead of proprietary technology in its automation approach

Warehouses are rapidly embracing automation. While firms like Amazon are creating their own robotic fleets internally, others are seeking automation technology from external providers.

FedEx has explored both pathways and determined that collaborating with robotics firms is the optimal strategy to stay competitive in the automation arena.

FedEx’s latest multi-year alliance with Berkshire Grey, a robotics company owned by SoftBank, exemplifies this strategy: leveraging expert knowledge to design robots capable of performing repetitive, hazardous tasks traditionally handled by humans. This non-exclusive partnership has led to the creation of Scoop, a robot intended for unloading bulk packages, allowing for the removal of large quantities of parcels from trucks simultaneously.

FedEx plans to introduce these robots in its warehouses via a pilot initiative later this year. While these robots won’t service every one of FedEx’s many unloading doors, the company aims to scale the bot’s deployment if the pilot is successful.

Stephanie Cook, director of advanced technology and innovation in robotics at FedEx, shared with TechCrunch that bulk unloading ranks among the most physically demanding and unpredictable tasks within FedEx’s warehouses. This isn’t the company’s first endeavor to automate bulk unloading; Cook mentioned challenges in identifying the appropriate robot for this function.

“We haven’t found anything off-the-shelf that meets our needs,” Cook stated. “We collaborated with Berkshire Grey previously and determined it was a suitable partnership for us. We recognized that this wasn’t a project that could be developed within a few months; it was going to be a multi-year journey to achieve this.”

According to O.P. Skaaksrud, vice president of advanced technology and innovation at FedEx, bulk unloading is an ideal function for automation. Although it does require these robots to make decisions, the complexity is lower than selecting or searching for specific packages, making the process easier to automate.

Techcrunch event

San Francisco, CA
|
October 13-15, 2026

“Given the diversity of package types, focusing on individual picks is simply not fast enough,” Skaaksrud explained. “That was one of the trade-offs we considered, as there are package unloaders that do single picks, but they lack the speed to handle this variety.”

Cook noted that the company is prioritizing the automation of the most hazardous and physically strenuous roles within its warehouses. These jobs are better suited for automation in general since they are often repetitive, freeing up employees to engage in safer, more skilled work.

Picking and packing partners

The Memphis-based firm does engage in in-house technology development, such as the FedEx SenseAware and SenseAware ID sensor systems, which facilitate package tracking.

However, Skaaksrud emphasized that creating sensors and developing robotics are distinct challenges.

“The development of sensor hardware for packages is complex, but advancing robotics capabilities is of an entirely different caliber,” Skaaksrud remarked. “Partnering with other companies in the field accelerates our progress. That’s how we perceive these collaborations — very advantageous for both FedEx and our partners.”

Berkshire Grey isn’t the only automation-centric partnership for FedEx. The company has secured several alliances (and conducted trials) in recent years as it aims to automate more aspects of its operations both inside and outside the warehouse.

Inside the warehouse, FedEx partners with Dexterity, a robotics startup valued at over a billion dollars that specializes in robots engineered to mimic human actions. Additionally, they have an agreement with another unicorn startup, Nimble, which focuses on creating fully autonomous warehouses.

Autonomous deliveries, whether for last-mile or long-haul, are also a key area of interest.

In 2021, the company entered into a pilot agreement with Aurora Innovation, an autonomous trucking startup, to transport packages along defined routes in Texas with self-driving trucks. The collaboration was expanded in 2022, resulting in over 3,200 successful autonomous deliveries.

FedEx also formed a partnership with Nuro, a company specializing in autonomous last-mile delivery robots, in 2021. At that time, FedEx characterized it as a long-term commitment with intentions to expand last-mile delivery capabilities. However, Nuro shifted from delivery to licensing its autonomous technology in 2025, leading to the conclusion of their collaboration.

The last-mile delivery avenue has been one that FedEx has explored internally with mixed results. The company developed and launched the SameDay Bot in 2019 to aid with last-mile delivery, but the bots faced criticism and were eventually banned from NYC by former mayor Bill de Blasio. After a few years, FedEx moved away from these efforts while reaffirming that it remains an area of focus.

Keeping it real

While the company is keen on remaining competitive in the overarching automation landscape, both Skaaksrud and Cook stressed that FedEx will not rush ahead impulsively. They are not simply chasing the next flashy robot or technology as soon as it becomes available.

“If we concentrate solely on the technology, we’ll likely fail,” Skaaksrud cautioned. “This is akin to playing 3D chess; you must address numerous components, many of which may not seem exciting, that are crucial to the overall solution. We are certainly taking steps to not only have compelling technology but also productive technology that effectively addresses business challenges.”

The company is also unconcerned that its partnership-based strategy will lead to a lack of proprietary technology. Skaaksrud posited that the hardware is merely hardware, asserting that FedEx trucks are simply trucks, and it’s the network and intelligence behind the delivery system that defines FedEx.

While headlines might suggest that every company is fervently pursuing full automation, FedEx intends to remain judicious as it introduces new technologies.

For Cook, the primary emphasis of these strategies is still on the human workforce within the warehouses, meaning technology must be crafted to complement their roles, enhancing safety and ease of work.

Consequently, and given the company’s priority on areas with clear returns on investment, humanoid robots are not a focus.

“Managing multiple humanoids in a constrained, dynamic space is quite challenging,” Skaaksrud noted. “I find humanoids to be fascinating and we’re definitely monitoring advancements, but it’s about finding the right application. You must navigate the hype as expectations can be misleading, yet there remains substantial long-term potential. Understanding limitations is crucial to setting realistic expectations.”

Nomadic secures $8.4 million to manage the data streaming from self-driving cars.

Nomadic secures $8.4 million to manage the data streaming from self-driving cars.

To create the autonomous machines of tomorrow, sometimes a model is required for your model. 

Businesses that are working on self-driving vehicles, robots interacting with the physical world, or autonomous construction machinery gather thousands, if not millions, of hours of video footage for analysis and training. 

Sorting and archiving that video is currently a task for humans, who must view all of it. Even when fast-forwarding, that process doesn’t scale. NomadicML, a company established by CEO Mustafa Bal and CTO Varun Krishnan, aims to address issues for clients who have 95% of their fleet data stored away.

The difficulty increases when searching for edge cases — the most crucial data showcases events that seldom happen and can confuse inexperienced physical AI models.

Nomadic is aiming to tackle that issue with a platform that converts footage into a structured, searchable dataset through a suite of vision language models. This, in turn, enables improved fleet monitoring and the crafting of distinctive datasets for reinforcement learning and quicker iteration.

The company revealed an $8.4 million seed funding round on Tuesday at a post-money valuation of $50 million. This round was led by TQ Ventures, with contributions from Pear VC and Jeff Dean, and will facilitate the onboarding of more clients and the ongoing enhancement of its platform. Nomadic also secured first place in Nvidia GTC’s pitch contest last month. 

The two founders, who met as undergraduates in computer science at Harvard, “kept encountering the same technical obstacles repeatedly at our jobs” at firms such as Lyft and Snowflake, Bal shared with TechCrunch. 

Techcrunch event

San Francisco, CA
|
October 13-15, 2026

“We offer individuals insights into their own footage, whatever drives their own AVs [and] robots,” he stated. “That is what propels these developers of autonomous systems forward, not arbitrary data.”

Consider, for instance, trying to enhance an AV’s comprehension that it can proceed through a red light if a police officer commands it to do so, or identifying every instance when vehicles pass under a particular type of bridge. Nomadic’s platform enables these occurrences to be recognized for both compliance reasons and to be directly integrated into training pipelines. 

Clients such as Zoox, Mitsubishi Electric, Natix Network, and Zendar are already leveraging the platform to create intelligent machines. Antonio Puglielli, the VP of Engineering at Zendar, remarked that Nomadic’s tool enabled the company to accelerate its work much more swiftly than the option of outsourcing, and that its domain expertise distinguished it from other competitors.

This type of model-based, auto-annotation technology is emerging as a vital workflow for physical AI. Established data labeling companies like Scale, Kognic, and Encord are creating AI tools to conduct this work, while Nvidia has launched a series of open-source models, Alpamayo, that can be tailored to address the issue.

Varun contends that his company’s tool goes beyond mere labeling; it functions as an “agentic reasoning system: you specify what it needs, and it determines how to find it,” utilizing multiple models to comprehend actions occurring and contextualize them. Nomadic’s investors anticipate that the startup’s focus on this specific infrastructure will prevail. 

“It’s akin to why Salesforce doesn’t create its own cloud and Netflix doesn’t construct its own [content distribution facilities],” Schuster Tanger, a partner at TQ Ventures who spearheaded the round, told TechCrunch. “The moment an autonomous vehicle company attempts to internally develop Nomadic, they divert from what enables their success, which is the robot itself.”

Tanger commends Nomadic’s talent, highlighting that Krishnan is an international chess master ranked as the world’s 1,549th-best player. Krishnan, in turn, boasts that all of the company’s roughly dozen engineers have published scientific papers.

Now, they are diligently working on specific tools, like one that comprehends the physics of lane changes from camera footage, or another that derives more precise placements for a robot’s grippers in a video. The forthcoming challenge, from the perspective of Nomadic and its clients, is to develop similar tools for non-visual data like lidar sensor readings or to unify sensor data across various modes. 

“Handling terabytes of video, processing that against hundreds of 100 billion-plus parameter models, and then extracting their accurate insights is exceedingly challenging,” Bal stated. 

Health data powerhouse CareCloud states that cybercriminals gained access to patients’ medical records.

Health data powerhouse CareCloud states that cybercriminals gained access to patients’ medical records.

The technology leader in healthcare, CareCloud, has announced that its patients’ electronic health records were compromised by hackers during a recent data breach this month.

The report, submitted to the U.S. Securities and Exchange Commission last Friday, indicated that unauthorized access was detected on March 16 within one of the six environments where the company keeps patients’ medical and healthcare records. According to the company, the hackers had unauthorized access to this medical records storage for over eight hours, although it is still unclear if any data was exfiltrated, or what specific data might have been taken, if at all.

The health technology company stated that it believes the hackers are no longer within its network after the systems were restored on the same day, and has engaged an undisclosed cybersecurity firm to conduct an investigation.

CareCloud did not specify how many individuals were impacted by the breach. The organization offers healthcare technology solutions, including electronic health records storage, for over 45,000 providers, including numerous doctors and healthcare professionals at thousands of hospitals and medical practices, thereby serving millions of patients, as reported in the company’s annual investor report submitted earlier in March.

Providers of electronic health records are lucrative targets for financially motivated cybercriminals, who steal personal information and threaten to release it unless a ransom is paid. In 2024, a ransomware attack by Russian cybercriminals resulted in the theft of a significant portion of America’s health records from Change Healthcare, causing extensive outages and delayed medical care for months.

It remains unclear whether the recent cyberattack on CareCloud led to any data destruction or if the hackers have made any demands to the company. A representative from CareCloud did not return a request for comment. We also inquired about how CareCloud manages patient data, such as whether the company distributes patient data across its six environments or if some of these environments function as backups for others. We will provide updates if we receive a response.

Based on CareCloud’s public internet records, a substantial portion of the company’s files and data are hosted on Amazon Web Services.

CareCloud noted in its SEC disclosure that on March 24, it concluded that the incident was significant enough to potentially impact its business materially and was legally obligated to inform its investors. The company stated that the breach is unlikely to influence its financial situation but acknowledged that its investigation is still ongoing.

Do you have more information regarding CareCloud’s data breach? Do you work at CareCloud and have insight into its security protocols? Reach out to this reporter through an encrypted message at zackwhittaker.1337 on Signal.