Rhea Medical Center
Disclosed Apr 10, 20251 year ago8,309 affectedConfirmed
Rhea Medical Center, the covered entity (CE), reported that its business associate (BA) experienced a cyberattack that compromised the protected health information (PHI) of 8,309 individuals. The PHI involved included names, addresses, dates of birth, Social Security numbers, claims and financial information, and other treatment information. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the BA implemented additional administrative, technical, and security safeguards.
What is known
| People affected | 8,309 (as reported to HHS) |
|---|---|
| Disclosed | Apr 10, 2025 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Vermont Attorney General: 2025-06-11 Rhea Medical Center Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): RHEA MEDICAL CENTER (Healthcare Provider, TN)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Apr 10, 2025 | 8,309 |
| Vermont AGresidents of VT | Jun 11, 2025 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 8309 · backfill source
- 2026-09-25 · disclosed: 2025-06-11 to 2025-04-10 · backfill source
- 2026-09-25 · summary: empty to Rhea Medical Center, the covered entity (CE), reported that its business associate (BA) experienced a cyberattack that compromised the protected health information (PHI) of 8,309 individuals. The PHI involved included names, addresses, date · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Vermont AG), confirmed by Vermont AG. Record counts are as reported. Not legal advice.