Healthcare has gone digital with cloud-based medical record systems, bringing many benefits but also raising concerns about protecting sensitive patient information. This research presents a new security system that protects electronic health records (EHRs) stored in the cloud. This paper combined three powerful protection methods: role-based access control, advanced encryption techniques, and image steganography. In the proposed method, different users (doctors, patients, family members) can only view information pertinent to their responsibilities. The system utilizes a hybrid cryptographic model, combining AES 256 for data encryption with Elliptic Curve Cryptography (ECC) for secure and efficient key management. To further strengthen data confidentiality, encrypted records are concealed within cover images using the Least Significant Bit (LSB) steganography method, offering an additional layer of obfuscation. Even if someone discovers the hidden data, they still cannot read it without breaking the encryption. The proposed system runs on standard web server technology, which makes it adaptable to various healthcare environments. Testing of the proposed method shows that this approach works faster and provides stronger protection than current systems. By addressing privacy concerns, data integrity, and breach risks, we are trying to help healthcare organizations better protect their patients’ most sensitive information.