Back Teiss

Hospital cyber attack exposed 150000 records; attackers reportedly withdrew extortion demand

Teiss • August 5, 2026

California-based healthcare service provider Madera Community Hospital reported that a data security incident last year exposed the sensitive personal information of over 150,000 individuals.

Madera Community Hospital is a nonprofit acute care hospital serving Madera County, California. It provides emergency, inpatient, outpatient, surgical, and diagnostic healthcare services with a focus on compassionate, patient-centered care.

In a data security incident notice published on its website, Madera Community Hospital said that on May 29, 2025, it identified unauthorised access to its internal network. The healthcare provider immediately launched an investigation, with assistance from external cyber security experts, to determine the nature and scope of the incident.

It also took steps to secure the affected network and notified relevant law enforcement authorities the incident.

“In June 2025, the forensic investigation found that an unauthorised third party gained access to our computer network for two days in late May 2025. That investigation, however, did not identify any files that were taken from our network.

“Based on subsequent developments, we have reason to believe that a third party acquired files from a portion of our network,” the healthcare provider said.

The compromised data included names, birthdates, information, login credentials, government identification numbers including Social Security numbers, financial account details, limited medical information including treatment and health insurance details and biometric information.

In a filing with the U.S. Department of Health and Human Services, Madera Community Hospital said that it has identified at least 150,810 individuals affected by the incident.

While Madera Community Hospital found no evidence of the compromised information being misused, it advised all affected individuals to regularly monitor their credit reports, account and benefit statements and report any suspicious activity to law enforcement authorities, including the police and the state attorney general.

While no known hacker group claimed responsibility for the cyberattack on Madera Community Hospital, the healthcare provider said that the group behind the attack withdrew its extortion demand after learning that the target was a hospital. According to the provider, the group said it did not want to harm patients.

Already have an account? Sign in

Winston House, 3rd Floor, Units 306-309, 2-4 Dollis park, London, N3 1HF

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Madera Community Hospital Data Breach Exposes 150,810 Patient Records Madera Community Hospital reported a data breach affecting 150,810 individuals after unauthorized access to its network in May 2025. The breach, identified on May 29, 2025, involved a two-day intrusion where personal, financial, and medical data were likely copied. The compromised information included names, birthdates, Social Security numbers, and limited medical details. Although the attackers initially demanded a ransom, they withdrew the demand upon realizing the target was a hospital. The hospital has not found evidence of the stolen data being misused publicly. Notifications to affected patients began in mid-July 2026, and the hospital has since improved its security measures. The U.S. Department of Health and Human Services classified this incident as a hacking or IT incident. 2 sources 52

Extracted Entities

Hospital cyber attack exposed 150000 records; attackers reportedly withdrew extortion demand

The full story

Extracted Entities

Attack Types (1)

Companies (1)

Industries (1)

MITRE ATT&CK (2)