Watsonville Community Hospital had a data breach — or two. It would be helpful to know which.

Watsonville Community Hospital in California has faced multiple disclosures about a cyber incident spanning late 2024 and 2025, with a November 29 event referenced as the initial attack and a December 2024 substitute notice outlining potentially exposed data. According to DataBreaches[.]Net, Termite added the hospital to its dark web leak site on 11 December 2024, with their leak site last updated on 8 January 2025 and claims including personnel and patient data.

By 21 March 2025, there was still no public indication that patients or HHS had been notified, and reports emerged that employees were experiencing tax refund fraud, while email inquiries to the hospital went unanswered. On 1 October 2025, the Sinobi group added the hospital to its leak site, claiming a breach date of 9 August 2025 and alleging encryption of files with 13 GB of data; however, DataBreaches notes the Sinobi data largely differed from Termite’s data, many files dating from March 2025.

The article questions whether Termite retained access after the November 2024 attack or whether Sinobi represents a separate incident, noting a lack of notification to state and federal regulators and that the hospital’s legal name is Pajaro Valley Health Care District Hospital Corporation.