Madera Community Hospital Data Breach Impacts Over 150,000 Individuals

Data Breach Notification

Madera Community Hospital in California is informing over 150,000 individuals about a data breach that exposed their personal, financial, and medical information. The hospital, a not-for-profit community healthcare provider, offers various services including emergency and surgical care.

Incident Details

The breach occurred in May 2025, when unauthorized actors accessed the hospital's network for two days and likely exfiltrated files. The hospital engaged experts and a data-review firm for analysis, receiving results in April 2026. Notification to affected individuals began in mid-July, and the US Department of Health and Human Services (HHS) was informed of the 150,810 impacted individuals.

Compromised Information

The compromised data includes names, contact information, dates of birth, Social Security numbers, account credentials, financial account information, treatment and health insurance information, and limited biometric information. The hospital stated that not every person had all these elements impacted and found no evidence of the information being publicly shared or released.

Ransom Demand Withdrawn

The extortion group responsible for the attack initially demanded a ransom payment but later withdrew it, claiming they did not want to harm patients. Madera Community Hospital worked with third-party experts to investigate the unauthorized activity, secure its systems, and notified law enforcement.