Cookeville Regional Medical Center Data Breach Investigation
The class action data privacy lawyers at The Lyon Firm are investigating an alleged cyberattack involving Cookeville Regional Medical Center (CRMC), a nonprofit hospital based in Cookeville, Tennessee, that provides comprehensive inpatient and outpatient healthcare across the Upper Cumberland region.
If you’ve received a notice or suspect your personal information was compromised in the alleged Cookeville Regional Medical data breach, acting quickly is essential. A data breach lawyer specializing in healthcare incidents can investigate whether CRMC failed to protect your Personally Identifiable Information (PII) or Protected Health Information (PHI). The potential risks—medical identity theft and financial fraud—may warrant legal action.
What happened at Cookeville Regional Medical Center?
Reports indicate that CRMC, a key healthcare provider serving Tennessee and Kentucky, may have fallen victim to a ransomware attack claimed by the Rhysida gang. This incident, first detected in mid-July, 2025, has raised alarms about the potential exposure of sensitive patient data. A skilled data breach lawyer can help you navigate this crisis, recover compensation, and hold responsible parties accountable.
On the hospital website, CRMC announced a “network security incident” that disrupted its systems. Rhysida posted allegedly stolen documents—including driver’s licenses, medical files, and financial records—on its dark web leak site by August 2, 2025.
While the hospital claims patient care remains largely unaffected, the lack of clarity on data exposure has left current and former patients wondering about the fallout. The Rhysida gang, known for aggressive ransomware tactics, threatens to release more of the unverified document samples unless a ransom is paid.
Time is critical in data breach cases as statutes of limitations can be short and early action preserves evidence. Contact a data breach attorney for a free consultation and to weigh your legal options. We have the resources and experience to take your data privacy case and reach a rightful settlement.