Incident

Ransomware attack on Central Jersey Medical Center exposes data of 131,000 patients


Learn More

Central Jersey Medical Center, a health center based in Perth Amboy, New Jersey, is reporting a ransomware attack that compromised sensitive patient information across its network of healthcare facilities. 

The incident was discovered on October 13, 2025, when Central Jersey Medical Center's IT personnel detected the unauthorized intrusion and launched an immediate investigation to secure the network and determine the scope of the breach. The Sinobi ransomware group claimed responsibility for the cyberattack and added the healthcare provider to its dark web leak site.

The investigation confirmed that the ransomware attack targeted the dental server network, encrypting patient files and allowing attackersa to steal sensitive information. The exposed data includes:

  • Full names
  • Dates of birth
  • Home addresses
  • Telephone numbers
  • Email addresses
  • Race or ethnicity information
  • Social Security numbers
  • Dental record numbers
  • Health insurance information
  • Dental diagnoses
  • Treatment history
  • Billing information

The attack has potentially affected approximately 131,000 patients who received services at the center's locations in Perth Amboy, Newark, and Carteret, New Jersey.

On October 23, 2025, Central Jersey Medical Center posted a breach notification on its official website at www.cjmc.us/data and began the process of notifying affected patients through direct mail communications. 

The medical center is offering complimentary credit monitoring and identity protection services to affected individuals. In the notification materials, Central Jersey Medical Center advised patients to carefully review their explanation of benefits statements from dental and medical insurance to ensure there are no unfamiliar services or activities. For those whose Social Security numbers were involved, the center recommended considering placing a credit freeze with the three major credit bureaus to prevent unauthorized accounts from being opened in their names.

Ransomware attack on Central Jersey Medical Center exposes data of 131,000 patients