Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Browse News Feed Stats Watchlists Beta About Contact

Cookeville Regional Medical Center data leak on Rhysida leak site

Data Leak
First reported
Last updated
Happening score
H score 27
1 unique sources, 1 articles

Summary

Hide ▲

The Rhysida group’s posting of Cookeville Regional Medical Center (CRMC) data exposed sensitive personal, financial, and medical records tied to more than 337,000 people. The stolen dataset was first offered for 10 bitcoin and later reportedly made freely available for download. The exposed material included names, dates of birth, addresses, SSNs, driver’s license numbers, financial account numbers, medical treatment information, and health insurance policy information. CRMC said it has no evidence of misuse so far, but the leak materially raises identity-theft and financial-abuse risk.

Related Happenings

7-Eleven franchisee-docs and Salesforce data leak

Data Leak
First: 18.05.2026 14:25 Last: 18.05.2026 14:25 Sources 1

About this happening: **7-Eleven** confirmed a **April 8, 2026** intrusion into systems used to store **franchisee documents**, and **ShinyHunters** later claimed the theft of **more than 600,000 Sales...

Latest development: 26.05.2026 10:01

Have I Been Pwned analyzed the leaked 7-Eleven data and estimated that the breach exposed personal information for 185,300 people, including names, dates of birth, unique email addresses, phone numbers, and physical addresses. The exposed archive was tied to ShinyHunters' extortion campaign against 7-Eleven and followed the group's leak-site posting after ransom demands were not met.

Open Happening

Cookeville Regional Medical Center patient records leak

Data Leak
First: 16.04.2026 18:01 Last: 16.04.2026 18:01 Sources 1

About this happening: **Cookeville Regional Medical Center** disclosed a **data leak** affecting **337,917 patients**, exposing personal and medical records and raising identity-theft risk. Files were...

Open Happening

Cookeville Regional Medical Center (CRMC) hit by ransomware attack

Incident
First: 16.04.2026 15:40 Last: 16.04.2026 15:40 Sources 1

How related: The Cookeville Regional Medical Center (CRMC) in Tennessee was targeted in a ransomware attack last year, and the cybersecurity incident resulted in a significant data breach.

About this happening: The **Cookeville Regional Medical Center (CRMC)** suffered a **ransomware attack** that caused a network intrusion and a major **data breach** affecting more than **337,000 indivi...

Latest development: 16.04.2026 18:01

Rhysida claimed responsibility for the Cookeville Regional Medical Center ransomware intrusion on August 2, 2025, demanded 10 Bitcoin worth roughly $1.15m, and posted sample files on its dark web leak site.

Open Happening

700Credit customer records leak through compromised third-party API

Data Leak
First: 15.12.2025 11:21 Last: 15.12.2025 11:21 Sources 1

About this happening: 700Credit disclosed a **data leak** that exposed personal information from dealership-client records and affected **5,836,521 individuals**, creating identity-theft risk. The expo...

Open Happening

GlobalLogic Oracle EBS employee HR data leak

Data Leak
First: 11.11.2025 17:24 Last: 11.11.2025 17:24 Sources 1

About this happening: **GlobalLogic** disclosed that attackers stole **personal information** from **10,471 current and former employees** through its **Oracle E-Business Suite (EBS)** environment, cre...

Open Happening

Timeline

  1. 16.04.2026 15:40 1 articles · 1mo ago

    Cookeville Regional Medical Center discovers network intrusion

    Initial Disclosure

    Cookeville Regional Medical Center in Tennessee discovered a network intrusion on July 14, 2025, and investigators later determined that certain files had been stolen in the prior days.

    Show sources
    Open in new tab
  2. 16.04.2026 15:40 2 articles · 1mo ago

    CRMC breach impact and Rhysida leak-site exposure update

    Victim Impact Update

    Cookeville Regional Medical Center told the Maine Attorney General’s Office that the incident affects more than 337,000 individuals, while Rhysida was listed on its leak website in August 2025 and allegedly made the stolen data freely available for download after failing to find a buyer.

    Show sources
    Open in new tab