Cookeville Regional Medical Center

Cookeville Regional Medical Center, also known by the alias CRMC, is a medical center providing healthcare services. Its headquarters is located in the United States of America. As a medical center, it delivers a range of clinical and diagnostic services to patients. The organisation operates within the healthcare sector, focusing on inpatient and outpatient care.

On July 14, 2025, Cookeville Regional Medical Center experienced a ransomware attack. The attack was carried out by the Rhysida ransomware group. Following the breach, Rhysida posted the hospital on its leak site. The group attempted to sell the stolen data for a price of ten bitcoin. No purchaser was found for the offered data. Consequently, Rhysida made the compromised information freely available online.

The compromised data encompassed patients' names. It also included their dates of birth. Addresses of affected individuals were exposed. Social Security numbers were among the leaked information. Driver’s license numbers were also part of the breach. Financial account details were disclosed in the incident. Medical treatment information of patients was compromised. Health insurance policy information was included in the leaked dataset.

The breach affected over 337,000 individuals. Cookeville Regional Medical Center stated there is no evidence of misuse of the exposed data. In response, the hospital is offering identity theft protection services. This offer applies specifically to those whose Social Security or driver’s license numbers were exposed. The incident highlights the cybersecurity risks faced by healthcare institutions. Cookeville Regional Medical Center continues to operate its medical services despite the breach.