Cookeville Regional Medical Center Under Investigation for Data Breach of Over 330,000 Records

Schubert Jonckheer & Kolbe LLP is investigating a data breach that led to unauthorized access to the sensitive information of 337,917 individuals affiliated with Cookeville Regional Medical Center (“CRMC”), a Tennessee-based hospital with 289 beds. 

Between July 11, 2025, and July 14, 2025, an unauthorized third party accessed CRMC’s network and acquired files containing sensitive data.

Although the breach occurred in July 2025, CRMC did not begin notifying affected individuals until April 14, 2026, which may have violated state and federal laws. The following information may have been compromised in the breach: names, addresses, dates of birth, Social Security numbers, driver’s license and/or government issued identification numbers, medical information, and health insurance information.  

If your personal information was impacted by this incident, you may be at risk of identity theft and other serious violations of your privacy. As a result, you may be entitled to money damages and an injunction requiring changes to CRMC’s cybersecurity practices.

If you received notification of this data breach or are affiliated with CRMC, and wish to obtain additional information about your legal rights, please fill out the form below.