Tennessee Hospital Data Breach Affects More Than 337,000
Summary
Cookeville Regional Medical Center says a network intrusion discovered July 14, 2025, led to files being stolen and more than 337,000 people being affected. Rhysida separately claimed to have leaked the data.
Key points
- CRMC discovered a network intrusion on July 14, 2025; its investigation found that files had been stolen in the preceding days.
- The breach affects more than 337,000 individuals, according to CRMC’s report to the Maine Attorney General’s Office.
- Potentially affected information includes names, dates of birth, addresses, Social Security and driver’s license numbers, financial account details, and medical and health insurance information.
- The Rhysida ransomware group listed CRMC on its leak site in August 2025 and claimed to have stolen more than 370,000 files totaling 500 GB.
- Rhysida said it sought to sell the data for 10 bitcoin and later made it available for download after claiming it found no buyer.
- CRMC said it has no evidence that the information has been misused; identity theft protection is offered only to people whose Social Security or driver’s license numbers were compromised.
Article Details
- Victim Organization
- Cookeville Regional Medical Center (CRMC)
- Incident Type
- Ransomware attack and data breach
- Data Types Exposed
- Name
- Date of birth
- Address
- Social Security number
- Driver’s license number
- Financial account number
- Medical treatment information
- Health insurance policy information
- Affected Records
- More than 337,000 individuals, according to CRMC’s report to the Maine Attorney General’s Office.
- Affected Data Size
- The Rhysida ransomware group claimed the stolen data comprised more than 370,000 files totaling 500 GB.
- Operational Impact
- No operational disruption was reported. CRMC said it had no evidence that information was misused.
- Ransom Or Extortion
- The hackers sought to sell the data for 10 bitcoin, then worth roughly $1 million. The group claimed it found no buyer and apparently made the data freely available for download.
- Claim Status
- confirmed