Cookeville Regional Medical Center
Disclosed Sep 12, 20251 year ago337,917 affectedConfirmed
The covered entity (CE), Cookeville Regional Medical Center, reported that it experienced a cyberattack that affected the protected health information (PHI) of 337,917 individuals. The PHI involved included clinical, demographic, and financial information. The CE notified HHS and the affected individuals. In response to the breach, the CE implemented additional administrative, technical, and security safeguards to better protect its PHI.
What is known
| People affected | 337,917 (as reported by the organization) |
|---|---|
| Disclosed | Sep 12, 2025 |
| Discovered | Mar 16, 2026 |
| Happened | Jul 11, 2025 |
| Attack | Hacking |
| Data exposed | Social Security numbers, Government IDs, Health, Insurance, Dates of birth, Addresses, Names |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Texas Attorney General data security breach report BR-0004978: Cookeville Regional Medical Centeroag.my.site.com · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Cookeville Regional Medical Center (Healthcare Provider, TN)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Sep 12, 2025 | 500 |
| Texas AGresidents of TX | Apr 17 | 529 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · disclosed: 2026-04-17 to 2025-09-12 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Cookeville Regional Medical Center, reported that it experienced a cyberattack that affected the protected health information (PHI) of 337,917 individuals. The PHI involved included clinical, demographic, and financ · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Texas AG), confirmed by Texas AG. Record counts are as reported. Not legal advice.