Sensitive Information Belonging to 337,917 People Potentially Exposed As Tennessee Healthcare Firm Hit by Data Breach

Hundreds thousands of people are impacted by a cybersecurity incident at a US healthcare facility.

According to a new filing with the Maine Attorney General, the hackers who targeted the Tennessee-based Cookeville Regional Medical Center (CRMC) have affected 337,917 people, including 22 Maine residents.

The healthcare firm says it learned on July 14th, 2025 that it was a victim of a ransomware attack. After discovering the breach, CRMC says it launched an internal investigation, secured the systems and contacted law enforcement. The healthcare firm also says it hired a forensic security firm to assist in the investigation, which concluded on March 16th.

The company says it discovered that an unauthorized party accessed its computer network and viewed or acquired files between July 11th, 2025 and July 14th, 2025.

The healthcare firm says that the breach has potentially exposed the personal information of patients, including full names, Social Security numbers, dates of birth, driver’s license numbers, medical treatment information, health insurance information and financial account information.

Cookeville Regional Medical Center says it is mailing notification letters to all patients whose personal information is suspected of being compromised. The company is also offering one year of free identify protection services.

CRMC says that it has taken measures to try and prevent future data breaches, including “strengthening our technical safeguards.”

Generated Image: Midjourney