MalwarePIIIdentity (basic)LowContained

Cookeville Regional Medical Center

bd_5d9fc57dfb8b5a63 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jul 14, 2025

Filed

Apr 14, 2026

To disclose

—

Affected

Not disclosed

Linked

6 records

Confidence

64%

Full breach record for Cookeville Regional Medical Center →2 incidents on file

Cookeville Regional Medical Center notified Nebraska AG of a ransomware attack discovered July 14, 2025. Unauthorized access occurred July 11-14, 2025. Files containing personal information were accessed. The company engaged forensic investigators and law enforcement, secured systems, and offered one year of Experian IdentityWorks credit monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 3 days

Jul 11, 2025

Begins

Jul 14, 2025

Discovered

Apr 14, 2026

Filed

This filing is one of 6 records about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siterhysidabd_0f974ae893d487682025-07-13 · +275dVerified by operator

Regulatory filings (4) · sorted by filing gap

Maine State AGbd_276e5eca9296aab32026-04-14Verified
Massachusetts State AGbd_483d2de112ba28a82026-04-14Verified by operator
New Hampshire State AGbd_cca3ba3c3341f1822026-04-14Verified by operator
Texas State AGbd_6daf9b18a85b82482026-04-17 · +3dVerified by operator

Name: Cookeville Regional Medical Center
norm: cookeville regional medical center

Name: Cookeville Regional Medical Center
norm: cookeville regional medical center

Discovered: Jul 14, 2025
Breach occurred: Jul 11, 2025 – Jul 14, 2025
Undetected for: 3 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 16, 2026
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial

During the incident: Began an internal investigation
Worked to secure our systems
Notified law enforcement
Engaged a forensic security firm to assist with our investigation
Changes made: Securing our systems
Strengthening our technical safeguards
Arranged for you to enroll in a free one-year membership of Experian IdentityWorksSM Credit 3B
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Maine State AGApr 14 · first

Massachusetts State AGApr 14 · first

New Hampshire State AGApr 14 · first

Nebraska State AGApr 14 · first · this page

Texas State AG+3d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/4d5602fe-a7ea-4e97-bc80-06ae77a1f2f6.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 14, 2026
Raw hash: a32ad27a04adada4cfb388bf9a74549385393078ca1f225921b7f9fe8b725962

Linked disclosures

Ransomware claims (1)

Regulatory filings (4) · sorted by filing gap

Reporting entityCookeville Regional Medical Center

Victim entityCookeville Regional Medical Center

Incidentdiscovered Jul 14, 2025

Stated responseBegan an internal investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancenebraska.gov