[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fH6S44Lp8fm_s9SDZJFZyRktKr37CXT-VbXnirP-0Xuk":3},{"article":4,"iocs":46,"watch_terms":47,"solutions":48,"lesson":138},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":23,"category":24,"article_tags":28},"3c7b2bbc-439b-4e17-8d33-ecbe65ce7282","150,000 Impacted by Madera Community Hospital Data Breach","150-000-impacted-by-madera-community-hospital-data-breach-778f2b","An extortion group stole personal, financial, and medical information from the hospital’s network. The post 150,000 Impacted by Madera Community Hospital Data Breach appeared first on SecurityWeek.","Madera Community Hospital in California has disclosed a data breach affecting 150,810 individuals. An extortion group accessed the hospital's network in May 2025, exfiltrating personal, financial, and medical information, including Social Security numbers and treatment details. The attackers reportedly withdrew their ransom demand, claiming they did not want to harm patients. The hospital has begun notifying affected individuals and law enforcement.","Madera Community Hospital reports a data breach impacting over 150,000 individuals.","https:\u002F\u002Fwww.securityweek.com\u002F150000-impacted-by-madera-community-hospital-data-breach\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2024\u002F05\u002Fhealthcare-medical-data-breach-.jpeg","2026-08-04T08:33:45+00:00","2026-08-04T10:00:10.181937+00:00",7,[17,20],{"name":18,"type":19},"Madera Community Hospital","product",{"name":21,"type":22},"extortion group","threat_actor","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":23,"icon":25,"name":26,"slug":27},null,"Breaches","breaches",[29,31,36,41],{"category":30},{"id":23,"icon":25,"name":26,"slug":27},{"category":32},{"id":33,"icon":25,"name":34,"slug":35},"614132b8-5837-4952-b8b5-c6c9a32a1d85","Privacy","privacy",{"category":37},{"id":38,"icon":25,"name":39,"slug":40},"6cbdd207-aaa1-4176-9534-e156b125e917","Nation-state","nation-state",{"category":42},{"id":43,"icon":25,"name":44,"slug":45},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[18],{"controls":49,"vendors":137},[50,79,108],{"slug":51,"name":52,"problem":53,"products":54},"encryption-key-management","Encryption and key management","Stolen data stays unreadable, and the keys stay under your control.",[55,63,71],{"vendor_slug":56,"vendor_name":57,"vendor_logo":58,"product_slug":59,"product_name":60,"url":61,"description":62},"thales","Thales","\u002Fvendor-logos\u002Fthales.png","luna-hsm","Thales Luna HSM","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fhardware-security-modules","Hardware security modules for protecting cryptographic keys.",{"vendor_slug":64,"vendor_name":65,"vendor_logo":66,"product_slug":67,"product_name":68,"url":69,"description":70},"hashicorp","HashiCorp","\u002Fvendor-logos\u002Fhashicorp.png","vault","HashiCorp Vault","https:\u002F\u002Fwww.hashicorp.com\u002Fen\u002Fproducts\u002Fvault","Secrets management with short-lived credentials and encryption as a service.",{"vendor_slug":72,"vendor_name":73,"vendor_logo":74,"product_slug":75,"product_name":76,"url":77,"description":78},"utimaco","Utimaco","\u002Fvendor-logos\u002Futimaco.png","utimaco-hsm","Utimaco General Purpose HSM","https:\u002F\u002Futimaco.com\u002Fdata-protection\u002Fgp-hsm","Hardware security modules for key generation, storage and cryptographic operations.",{"slug":80,"name":81,"problem":82,"products":83},"incident-response-retainer","Incident response retainer","Experts are on call before the worst day, not searched for during it.",[84,92,100],{"vendor_slug":85,"vendor_name":86,"vendor_logo":87,"product_slug":88,"product_name":89,"url":90,"description":91},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","incident-response","CrowdStrike Incident Response","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fservices\u002Fincident-response\u002F","Incident response services, available on retainer.",{"vendor_slug":93,"vendor_name":94,"vendor_logo":95,"product_slug":96,"product_name":97,"url":98,"description":99},"truesec","Truesec","\u002Fvendor-logos\u002Ftruesec.png","truesec-incident-response","Truesec Incident Response","https:\u002F\u002Fwww.truesec.com\u002Fservice\u002Fincident-response","Incident response team with a retainer option.",{"vendor_slug":101,"vendor_name":102,"vendor_logo":103,"product_slug":104,"product_name":105,"url":106,"description":107},"google","Google","\u002Fvendor-logos\u002Fgoogle.png","mandiant-incident-response","Mandiant Incident Response","https:\u002F\u002Fcloud.google.com\u002Fsecurity\u002Fconsulting\u002Fmandiant-incident-response-services","Incident response services from Mandiant, available on retainer.",{"slug":109,"name":110,"problem":111,"products":112},"third-party-risk-management","Third-party risk management (TPRM)","You know which suppliers could hurt you, and you hear quickly when one of them is breached.",[113,121,129],{"vendor_slug":114,"vendor_name":115,"vendor_logo":116,"product_slug":117,"product_name":118,"url":119,"description":120},"bitsight","Bitsight","\u002Fvendor-logos\u002Fbitsight.png","bitsight-tprm","Bitsight Third-Party Risk Management","https:\u002F\u002Fwww.bitsight.com\u002Fproducts\u002Fthird-party-risk-management","Supplier assessments and continuous monitoring based on security ratings.",{"vendor_slug":122,"vendor_name":123,"vendor_logo":124,"product_slug":125,"product_name":126,"url":127,"description":128},"upguard","UpGuard","\u002Fvendor-logos\u002Fupguard.png","upguard-vendor-risk","UpGuard Vendor Risk","https:\u002F\u002Fwww.upguard.com\u002Fproduct\u002Fvendor-risk","Supplier security questionnaires, ratings and continuous monitoring.",{"vendor_slug":130,"vendor_name":131,"vendor_logo":132,"product_slug":133,"product_name":134,"url":135,"description":136},"securityscorecard","SecurityScorecard","\u002Fvendor-logos\u002Fsecurityscorecard.png","security-ratings","SecurityScorecard Ratings","https:\u002F\u002Fsecurityscorecard.com\u002Fsolutions\u002Fuse-cases\u002Fsecurity-ratings\u002F","Outside-in security ratings and monitoring of suppliers.",[],{"slug":139,"title":140,"body":141,"framework_refs":142,"framework_notes":154},"ransomware-group-exfiltrates-150k-patient-records-from-california-hospital","Ransomware Group Exfiltrates 150K Patient Records from California Hospital","An extortion group gained unauthorized access to Madera Community Hospital's network in May 2025, exfiltrating highly sensitive personal, financial, and medical data for over 150,000 individuals. The breach highlights the persistent targeting of healthcare organizations, which hold high-value data including Social Security numbers and treatment records that are lucrative for extortion. The fact that attackers were able to move laterally and exfiltrate large volumes of data suggests inadequate network segmentation and data access controls. Healthcare breaches carry severe consequences — beyond regulatory penalties under HIPAA, victims face lasting risks of identity theft and medical fraud. This incident underscores that even a 'sympathetic' attacker who withdraws a ransom demand has already caused irreversible harm through data exposure.",[143,144,145,146,147,148,149,150,151,152,153],"NIST CSF PR.DS-1 (Data-at-rest protection)","NIST CSF PR.DS-2 (Data-in-transit protection)","NIST SP 800-66 (HIPAA Security Rule Guidance)","HIPAA Security Rule 45 CFR § 164.312 (Technical Safeguards)","CIS Control 3 (Data Protection)","CIS Control 12 (Network Infrastructure Management)","CIS Control 13 (Network Monitoring and Defense)","CIS Control 17 (Incident Response Management)","NIST AC-3 (Access Enforcement)","NIST SI-4 (System Monitoring)","GDPR Article 32 (Security of Processing — applicable to any EU-linked individuals)",{}]