By HFT Staff

On June 18, 2026, Cameron Regional Medical Center (CRMC) discovered it was the victim of a sophisticated ransomware attack. Upon discovery, CRMS immediately took steps to secure its systems and engaged third-party specialists to perform a thorough investigation into the nature and scope of the incident, remediate and restore access. 

While the investigation remains ongoing, based on the findings to date, CRMC believes that protected health information (PHI) belonging to its patients may have been subject to unauthorized access. Although CRMC is unable to confirm the specific information that may be affected at this time, it is providing notification of this incident.  

The affected information may include patient names, as well as one or more of the following: address, date of birth, Social Security number, driver’s license number, financial account information, medical diagnosis and treatment information, dates of medical treatment,  medical provider name, patient identification  number, agency-assigned identification number, treatment cost information, health insurance information, electronic/digital signatures and/or employer-assigned identification number.  

At this time, CRMC is not aware of any evidence to suggest that any information has been fraudulently misused. However, in an abundance of caution, it is notifying potentially impacted individuals of this incident. 

In response to this incident, CRMC has partnered with third-party forensic specialists to fully investigate the nature and scope of this matter, and to evaluate and reinforce existing security measures and facilities within our network to ensure optimal data security. As previously stated, although it has no evidence of actual or attempted fraudulent misuse of any information resulting from this incident, individuals are nonetheless encouraged to monitor their account statements and explanation of benefits forms for suspicious activity and to detect errors.