Memorial Hospital Ransomware Attack Exposes Data of 120,000 Individuals

Memorial Hospital and Manor, a small healthcare facility in Bainbridge, Georgia, is alerting 120,000 individuals that their data was compromised in a ransomware attack.

Initially disclosed in November, the attack forced hospital staff to rely on pen and paper for record-keeping, though operations reportedly remained functional. Memorial engaged cybersecurity specialists and launched an investigation to assess the breach's impact. While the hospital has yet to confirm the specific ransomware strain, the Embargo ransomware group has taken responsibility, claiming to have stolen 1.15 terabytes of sensitive data, which has now been leaked on its Tor site.

According to a filing with the Maine Attorney General’s Office, Memorial began notifying affected Maine residents on February 7, offering one year of free identity protection services, credit monitoring, identity theft recovery assistance, and a $1 million identity fraud loss reimbursement policy through IDX.

The compromised data may include names, Social Security numbers, birth dates, health insurance details, medical treatment records, and medical histories. While the hospital states that there is no evidence of misuse, the public availability of this information raises concerns that cybercriminals may soon exploit it.