Back Securityaffairs.Co

Cookeville Regional Medical Center hospital data breach impacts 337,917 people

Securityaffairs.Co •Pierluigi Paganini • April 16, 2026

A ransomware attack on Cookeville Regional Medical Center hospital (Tennessee) exposed data of 337,000 people after hackers stole 500GB of sensitive information from its systems. A ransomware attack on Cookeville Regional Medical Center (CRMC) in Tennessee led to a major data breach affecting 337,000 people. The attack, carried out by the Rhysida group, involved […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Cookeville Medical Center Data Breach Affects Over 337,000 Patients Cookeville Regional Medical Center (CRMC) in Tennessee reported a ransomware attack that compromised the personal and medical data of 337,917 patients. The attack occurred between July 11 and July 14, 2025, and was attributed to the Rhysida ransomware group, which demanded a ransom of 10 Bitcoin, valued at approximately $1.15 million at the time. The hospital began notifying affected individuals on April 14, 2026, nearly nine months after the breach was detected. Data accessed may include sensitive information such as Social Security numbers, medical records, and financial details. CRMC is offering 12 months of free identity theft protection to affected patients. This incident is noted as the eighth-largest healthcare ransomware breach in the U.S. for 2025. The hospital has implemented additional security measures since the attack. The lengthy notification period reflects the extensive forensic investigation required to assess the breach's impact. 5 sources 68

Extracted Entities

Cookeville Regional Medical Center hospital data breach impacts 337,917 people

The full story

Extracted Entities

Attack Types (2)

Companies (1)

MITRE ATT&CK (1)

Ransomware Groups (1)