Data Breach Watch logoDBW
    Healthcare
    Medium
    investigation open
    Updated about 1 month ago

    Cookeville Regional Medical Center Data Breach

    Key takeaways

    • Reports suggest a potential breach involving Cookeville Regional Medical Center.
    • Discovered on July 11, 2025.
    • Possible data exposed: Name, SSN, Financial Account Number, Medical Treatment Information, Health Insurance Information.
    • Affects individuals in: Tennessee.
    • Confirmation level: Confirmed by company.

    Breach confirmed

    The Cookeville Regional Medical Center breach is confirmed. If you may be affected, add your details below and we will take it from there.

    Detailed summary

    Cookeville Regional Medical Center experienced a ransomware attack from July 11-14, 2025. The medical center confirmed the breach and began notifying affected individuals in mid-April 2026.

    The breach exposed names, Social Security numbers, financial account numbers, medical treatment information, and health insurance information for over 337,000 individuals. The full scope of potential data compromise is based on company notifications and remains under investigation by law firms. No state attorney general filings have been mentioned in available sources.

    More details about the breach and its impact may emerge as investigations continue. Notices to affected individuals may also be delayed.

    Data possibly involved

    • Name
    • SSN
      Can be used to open fraudulent accounts and file false tax returns
    • Financial Account Number
    • Medical Treatment Information
    • Health Insurance Information
      Could be used for insurance fraud

    Company Response Timeline

    Response Grade
    F

    Took over 180 days or has not yet notified consumers

    Breach Occurred

    Jul 11, 2025

    Company Discovered

    Jul 11, 2025

    Regulator Notified

    Unknown

    Consumers Notified

    Apr 15, 2026

    0 days to discover
    278 days to notify consumers

    Breach Verification Status

    Reports Only

    Complete

    Initial dark web reports of potential breach

    Company Confirmed

    Current

    Company has acknowledged the breach

    Regulator Confirmed

    Confirmed by regulatory authorities

    Note: Breach verification can take time. Information may evolve as more details become available from companies and regulators.

    Case Status:
    Investigation Open

    We're actively investigating this case and seeking affected individuals.

    Were you affected? Submit your information below.

    Were You Affected By This Breach?

    If you are a customer or have received a data breach notification, you may submit your information as part of our ongoing investigation. Submitting your information is free and does not obligate you.

    Were you in the Cookeville Regional Medical Center breach? Check your email

    Free scan against known breach datasets. Then remove your info from data-broker sites with Data Shield.

    No signup required. 30-second scan. Your email is only stored if you opt into alerts.

    Get your info off data-broker sites

    Data Shield files removal requests with every broker that accepts an authorized agent, and gives you the exact link or letter for the brokers that only accept requests from you.

    See how Data Shield works

    Check Your Risk Level

    Answer a few questions to understand how this breach might affect you

    What should I do?

    Change your passwords

    Update passwords for the affected service and any accounts using the same password

    Enable two-factor authentication

    Add an extra layer of security to your accounts

    Monitor your accounts

    Watch for suspicious activity on your financial and online accounts

    Watch for phishing attempts

    Be cautious of emails or messages claiming to be from the affected company

    Consider a credit freeze

    Prevent unauthorized access to your credit report

    Scan your email for other exposures

    Check whether this address shows up in other known breaches. Free, no account.

    Get your info off data-broker sites

    Data Shield files removal requests with every broker that accepts an authorized agent, and gives you the exact link or letter for the brokers that only accept requests from you.

    See how Data Shield works

    Got a notice about this breach?

    Paste it into BreachBrief to see exactly what data was exposed, how serious it is, and what to do next.

    Protect yourself

    Share This Breach Alert

    Help friends and family who might be affected by sharing this breach information

    Are you a law firm investigating this breach?

    Get qualified claimant leads delivered directly to your CRM.

    Related breaches

    Stay informed about breaches like this one

    We'll notify you when new data breaches are reported. Free, no spam. Unsubscribe anytime.

    Free, no spam. Unsubscribe anytime.