Madera Community Hospital Says 150,810 People Affected by Cyberattack; Extortion Demand Reportedly Withdrawn

Summary
Madera Community Hospital reported unauthorized network access in May 2025 and later said files were believed to have been acquired, affecting at least 150,810 people. The hospital said the attackers withdrew an extortion demand.
Key points
- The hospital said an unauthorized third party accessed its network for two days in late May 2025.
- Its initial forensic investigation found no files taken, but later developments led the hospital to believe files had been acquired.
- A filing with the U.S. Department of Health and Human Services identified at least 150,810 affected individuals.
- Potentially exposed information included Social Security numbers, login credentials, financial account details, limited medical information, and biometric data.
- The hospital reported no evidence that the information had been misused.
- According to the hospital, the group behind the attack withdrew its extortion demand after learning the target was a hospital.
Article Details
- Victim Organization
- Madera Community Hospital
- Incident Type
- Unauthorized access to the hospital's internal network, with the hospital stating that subsequent developments gave it reason to believe a third party acquired files.
- Data Types Exposed
- Names
- Birthdates
- Contact information
- Login credentials
- Government identification numbers, including Social Security numbers
- Financial account details
- Limited medical information, including treatment and health insurance details
- Biometric information
- Affected Records
- At least 150,810 individuals
- Operational Impact
- The hospital said it secured the affected network and notified law enforcement. It reported no evidence that the compromised information had been misused.
- Ransom Or Extortion
- The hospital said the group behind the attack withdrew its extortion demand after learning the target was a hospital, stating that it did not want to harm patients.
- Claim Status
- confirmed
