Central Jersey Medical Center, Inc (CJMC) experienced a cybersecurity breach where an unauthorized individual infiltrated its network and potentially exfiltrated sensitive personal and health data. The compromised records included personally identifiable information (PII) and protected health information (PHI), such as names, dates of birth, addresses, Social Security numbers, dental records, health insurance details, treatment histories, and billing information. The breach exposed highly sensitive data of an unknown number of individuals, raising significant privacy and identity theft risks. A national class-action law firm, Lynch Carpenter LLP, is investigating claims for potential compensation on behalf of affected parties. The incident underscores severe vulnerabilities in CJMC’s data protection measures, with potential long-term repercussions for impacted individuals, including financial fraud, medical identity theft, and reputational harm to the organization.

Central Jersey Medical Center, a federally qualified health center in Perth Amboy, New Jersey, suffered a ransomware attack on August 25, where a threat actor gained access to its dental servers and encrypted files on its IT network. The breach exposed sensitive personal and health data, including names, dates of birth, addresses, Social Security numbers, health insurance details, dental records, treatment histories, and billing information. While the electronic medical record system and financial accounts remained unaffected, the incident compromised data of an undisclosed number of individuals, including students and adults served by its school-based health centers in Newark. The organization engaged external cybersecurity experts to investigate, secure the network, and strengthen safeguards. No confirmation was provided on data exfiltration, ransom payment, or the responsible cybercriminal group. The breach highlights the vulnerability of under-resourced healthcare providers to ransomware attacks, risking long-term reputational and operational damage.

Central Jersey Medical Center (CJMC), a Federally Qualified Health Center (FQHC) serving communities in New Jersey since 2001, suffered a ransomware attack on August 25, 2025, orchestrated by the Sinobi ransomware group. The breach targeted CJMC’s dental servers’ network, leading to unauthorized access and encryption of files containing highly sensitive patient data. The stolen information, later posted on the dark web on October 10, 2025, included names, dates of birth, Social Security numbers, addresses, health insurance details, dental records, diagnoses, treatment histories, and billing information.The exposure of such data poses severe risks, including identity theft, insurance fraud, and long-term financial harm to affected individuals. CJMC issued a public notice and began notifying victims via mail, urging them to enroll in credit monitoring and legal recourse. The breach’s scale—affecting personal, financial, and medical records—underscores its critical impact on patient privacy and trust in the healthcare provider. Legal firms are actively investigating claims for compensation, highlighting the breach’s destructive potential for both individuals and the organization’s reputation.