Cameron Regional Medical Center Confirms Ransomware Attack; Data Exposure Review Ongoing
Summary
Cameron Regional Medical Center confirmed a ransomware attack discovered June 18, 2026. Anubis claimed it stole hospital data, while the hospital says its investigation is ongoing and it cannot yet confirm what information was affected.
Key points
- The hospital said it discovered the ransomware incident on June 18, 2026; the number of affected individuals has not been disclosed.
- Anubis claimed responsibility in an August 3, 2026 Tor post and said it obtained patient, employee, medical, and internal hospital documents; these claims are not independently confirmed in the article.
- The hospital believes patient protected health information may have been accessed but says it cannot yet confirm the specific information affected.
- Potentially exposed information listed by the hospital includes Social Security and driver's license numbers, financial account details, medical and treatment information, and health insurance information.
- The investigation is ongoing, and the hospital said it had no evidence of fraudulent misuse at the time of its notice, while noting that its review was incomplete.
- The hospital said affected individuals will receive written notice by U.S. Mail; the article says no credit-monitoring or identity-protection offer was included in the notice.
Article Details
- Victim Organization
- Cameron Regional Medical Center
- Incident Type
- Ransomware attack
- Data Types Exposed
- Patient names, addresses, dates of birth, Social Security numbers, driver's license numbers, financial account information, electronic or digital signatures, and employer-assigned identification numbers (potentially exposed according to the hospital)
- Medical diagnoses and treatment information, dates of medical treatment, medical provider names, patient identification numbers, agency-assigned identification numbers, treatment cost information, and health insurance information (potentially exposed according to the hospital)
- Patient records, internal investigations, HIPAA-related documents, employee information, medical records, and operational documents (reportedly obtained, according to Anubis's claim)
- Affected Records
- Not disclosed
- Operational Impact
- The hospital discovered the breach on 2026-06-18. Its investigation is ongoing, and it believes patient protected health information may have been subject to unauthorized access, but it has not confirmed which information was affected. The hospital reported no evidence of fraudulent misuse, while noting that its review of potential misuse was incomplete.
- Ransom Or Extortion
- On 2026-08-03, Anubis claimed responsibility and said it intended to publish the allegedly stolen data within six days. The article does not report a ransom demand or confirm that data was published.
- Claim Status
- confirmed