MalwareRansomwareData ExfiltratedData EncryptedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNTMediumContained
Cookeville Regional Medical Center
bd_cca3ba3c3341f182 · schema v1 · pii pii-v1
Full breach record for Cookeville Regional Medical Center →Cookeville Regional Medical Center reported a ransomware incident to the New Hampshire Attorney General on April 14, 2026. Unauthorized access occurred between July 11 and July 14, 2025. The breach affected 24 New Hampshire residents, exposing names, SSNs, DOB, medical records, and insurance info. CRMC engaged forensic investigators, notified law enforcement, and offered 12 months of credit monitoring.
Leak gap clock✗ Leak >180d39 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed24 affectedView incident
A leak claim by rhysida about this victim predates this filing by 275 days.View originating leak claim
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/cookeville-regional-medical-center-20260414.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 14, 2026
- Raw hash
- 09035dc65b1c18b1dc04c9fd66fff860a98561e30eaf376689a99dbdfabd48a9
Reporting entity
- Name
- Cookeville Regional Medical Centernorm: cookeville regional medical center
Victim entity
- Name
- Cookeville Regional Medical Centernorm: cookeville regional medical center
Incident
- Discovered
- Jul 14, 2025
- Materiality determined
- —
- Notification sent
- Apr 14, 2026
- Affected individuals
- 24
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNT
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1119 Automated Collection
- Threat actor
- ExternalFinancial
Compliance
- Time to disclose
- 39 weeks(274 days from discovery to filing)
- Compliance flags
- Leak >180d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.