Watsonville Community Hospital (WCH), a California-based healthcare provider, experienced a cybersecurity incident where an unauthorized individual accessed sensitive records containing personally identifiable information (PII) and protected health information (PHI). The compromised data includes financial account details, clinical/treatment records, medical provider names, prescription information, health insurance data, medical record numbers, full/partial Social Security numbers, tax IDs, driver’s license/government IDs, passport numbers, payment card details, access credentials, and birth certificates.The breach exposed highly sensitive patient and employee data, potentially enabling identity theft, financial fraud, or medical fraud. While the exact number of affected individuals remains undisclosed, the incident has prompted legal action, with Lynch Carpenter, LLP investigating claims for potential compensation. The breach poses severe risks to privacy, financial security, and trust in the hospital’s data protection measures, with long-term reputational and operational consequences for WCH.

Watsonville Community Hospital, a 106-bed facility serving California’s central coast with over 650 employees and 300 physicians, suffered a ransomware attack between Nov. 25–29, 2024, executed by the hacker group TERMITE. The breach exposed personally identifiable information (PII) and protected health information (PHI), including names, Social Security numbers, driver’s licenses, medical records (treatment, prescriptions, health insurance), financial data (payment cards, tax IDs), and access credentials. TERMITE claimed to have stolen the hospital’s database, posting sample screenshots on their dark web portal. Affected patients were notified via mail and a public Notice of Data Privacy Incident on Oct. 15, 2025, with the incident reported to the California Attorney General’s office the following day. The breach poses severe risks of identity theft, financial fraud, and medical fraud, prompting the hospital to offer free credit monitoring and legal recourse for victims seeking compensation for damages, emotional distress, and out-of-pocket expenses.