Minidoka Memorial Hospital Restores Imaging After Cyber Incident

· Original article ↗

Summary

Minidoka Memorial Hospital said an April 5 cyber incident limited imaging and led to some emergency transfers; imaging access was restored by April 19. A reported Blackwater leak-site claim remains unverified, with no data exposure confirmed.

Key points

  • The hospital said a cyber incident on April 5 temporarily affected some internal systems and limited imaging services.
  • Some emergency patients were transferred, while the hospital and its clinics continued treating patients.
  • The hospital said full imaging access was restored by midnight on April 19.
  • Minidoka said it was working with cybersecurity experts and authorities to investigate; it did not identify the affected systems or say whether patient or employee data was accessed.
  • DataBreaches.net reported that a group using the name Blackwater listed the hospital on a leak site and claimed to have obtained about 2.33 million files totaling roughly 576.6 GB. The claim was not independently verified, and no proof was provided.
  • The hospital did not identify a responsible party or say whether ransomware or other malware was involved.

Article Details

Victim Organization
Minidoka Memorial Hospital
Incident Type
Cyber incident that temporarily affected internal systems and limited imaging services.
Incident Date
2026-04-05
Disclosure Date
2026-04-17
Affected Records
A group using the name Blackwater claimed it obtained about 2.33 million files; the claim was unverified and no proof was provided.
Affected Data Size
The group using the name Blackwater claimed the files totaled roughly 576.6 gigabytes; the claim was unverified.
Operational Impact
Imaging services were limited, and some emergency patients were transferred. The hospital and its clinics continued treating patients. Full imaging access was restored by midnight on April 19, 2026.
Ransom Or Extortion
A group using the name Blackwater reportedly listed the hospital on a leak site and claimed it would publish data after April 24. The claim was unverified; no ransom demand or data encryption was reported.
Claim Status
claimed

Threat Actors