Sonoma Valley Hospital was targeted in a ransomware attack by a Russian operating group in October 2020 Some patient medical information was compromised in the attack and the attackers were planning for ransom. But the hospital didn't pay any ransom and immediately took all electronic systems offline and prevented the attackers from blocking its computer systems.

Sonoma Valley Hospital was forced to give up its coveted three-letter domain name after hackers hijacked its website. The domain was maliciously acquired, and it became clear that the hospital would not have its domain returned. As a result, hospital officials began migrating all internet connectivity and email accounts to its new domain. While no patient data or privacy was compromised during the theft, the impact cannot be overstated. All marketing material, letterhead, business cards were need to be reprinted, as well as all branding and marketing campaigns.

The California Office of the Attorney General disclosed a data breach at Sonoma Valley Hospital in July 2013, stemming from an accidental exposure of healthcare information on their website between February 14, 2013, and April 17, 2013. The incident involved the unintentional publication of sensitive medical data, though critical identifiers such as Social Security numbers were not compromised. The exact number of affected individuals remains undetermined, but the breach raised concerns over patient privacy violations and potential regulatory non-compliance under healthcare data protection laws (e.g., HIPAA).While the exposed data did not include financial or highly sensitive personal details, the incident highlighted vulnerabilities in the hospital’s data handling protocols, particularly in securing web-published content. The breach’s limited scope—confined to healthcare records without broader identity theft risks—mitigated severe consequences, but it still posed reputational harm and operational scrutiny. Authorities emphasized the need for stricter access controls and audit mechanisms to prevent similar lapses in the future.