Ahmed Al-Kadi Hospital Confirms Ransomware Incident; Patient Care Unaffected

Summary
Ahmed Al-Kadi Private Hospital confirmed an unauthorized party accessed its IT environment and ransomware encrypted part of it. Patient care was not disrupted; whether personal or medical information was accessed or removed remains unknown.
Key points
- The hospital says an unauthorized third party accessed its IT environment and deployed ransomware that encrypted part of the environment.
- The incident occurred on April 18; the hospital brought in external cybersecurity specialists to contain the breach, investigate access, restore systems and assess possible information exposure.
- The hospital has not confirmed whether personal or medical information was accessed or removed, and its investigation is ongoing.
- Patient care and hospital services continued without disruption.
- The hospital reported the incident to South Africa’s Information Regulator under POPIA and warned patients about possible phishing, impersonation and fraud.
Article Details
- Victim Organization
- Ahmed Al-Kadi Private Hospital
- Incident Type
- Ransomware breach involving unauthorized access to the hospital's IT environment and encryption of part of its environment.
- Incident Date
- 2026-04-18
- Operational Impact
- A portion of the hospital's environment was encrypted. The hospital said patient care and services were not disrupted.
- Claim Status
- confirmed
