Coalinga Regional Medical Center Critical Access Hospital Breach (2025): Patient SSN Exposed

About Coalinga Regional Medical Center

Coalinga Regional Medical Center (CRMC) is a critical-access hospital in Coalinga, California, providing emergency, inpatient, outpatient, and routine care to residents of western Fresno County and the surrounding rural region. The facility operates under federal Critical Access Hospital designation, which provides Medicare reimbursement enhancements for small rural hospitals serving geographically isolated communities. As a HIPAA-regulated rural hospital, Coalinga RMC maintains patient identity, contact, insurance, billing, and clinical records across its emergency, inpatient, and outpatient operations. The patient base is concentrated in a rural agricultural region of central California where the hospital often serves as the primary local provider for acute and routine care.

Why They Hold Your Data

Regional hospitals collect patient identity, contact, insurance, billing, and medical records across emergency, inpatient, outpatient, and administrative systems.

Recent Developments

Coalinga Regional Medical Center was identified as a victim of the World Leaks ransomware group in early July 2025, with the threat actor claiming responsibility and listing the hospital on its dark-web leak site. The hospital has continued to operate following the incident, although detailed public disclosure has been limited as of this writing. U.S. plaintiff law firms began organizing class-action investigations following the breach claim. The World Leaks group has been active throughout 2025 with multiple healthcare and senior-care victims, including Family Farm and Home and Heritage Communities earlier in the year. As a critical-access hospital, Coalinga RMC operates under federal Medicare reimbursement rules that include cybersecurity-readiness expectations.

Data Points Exposed

Breach Impact

The institutional impact on Coalinga RMC is meaningful given the hospital's status as the primary acute-care provider for its rural region. Federal HIPAA notification obligations, an Office for Civil Rights review, California attorney-general filings, and emerging class-action investigations create a substantial compliance and litigation pipeline. As a critical-access hospital, Coalinga RMC operates with limited cybersecurity budget and staffing relative to larger metropolitan hospitals, which is a known industry-wide vulnerability. The reputational impact is concentrated within the local agricultural region, where the hospital often serves the same families across generations and where patient trust is unusually consequential. Operationally, the hospital continues to provide patient care.

Exploitation & Downstream Threats

• Identity theft and synthetic identity construction using government-issued IDs | • SIM swap attacks where phone numbers are present | • Targeted phishing campaigns using exposed email addresses | • Doxxing risk from physical address exposure

What You Should Do

1. Freeze credit at all three bureaus and monitor for new-account and tax-refund fraud.
2. Treat the home address as exposed: review mail and package handling and physical-security routines, and brief household staff to verify unusual requests.
3. Guard against SIM-swap and vishing: add a carrier port-out PIN and verify any 'support' calls independently.
4. Do not use unofficial 'am I affected' lookups; several are themselves harvesting operations.

How ObscureIQ Can Help

1. Corpus confirmation: determine whether and where the principal (plus household and staff) appear in this dataset and which specific fields are exposed for them.
2. Exposure mapping and footprint neutralization: cross-reference against broker-available data and suppress still-removable elements, prioritizing address and phone, since this record re-seeds broker networks.
3. ThreatWatch tuned to this incident's identifiers and misuse pattern (impersonation and targeting patterns, not generic credential monitoring).