Missouri Hospital Restores Systems After IT Outage; Ransomware and Data-Theft Claims Unverified
Summary
Cedar County Memorial Hospital’s August IT outage disrupted records, imaging and payments. Systems were restored, but the hospital has not confirmed a ransomware attack or data theft; forensic experts and the FBI are investigating.
Key points
- The hospital shut down its IT networks on Aug. 14 after a disruption took electronic health records, the patient portal and internet access offline.
- Imaging transmission was disrupted, prompting partial diversion of trauma and critical patients needing advanced imaging; other care continued using manual records and backup procedures.
- The outage also affected the Medical Mall Clinic and card payments, and led to longer waits for patients.
- Most network and online systems returned within a week. Meditech, electronic orders and the patient portal were restored Aug. 28, and ambulance diversion ended.
- A group calling itself Wallstreet listed the hospital on its leak site and claimed files came from the hospital; the publisher said it could not verify the files’ authenticity, scope or source.
- The hospital said outside forensic experts and the FBI were investigating. It had not determined whether patient information was affected.
- A proposed class-action lawsuit alleges ransomware and data theft, but the hospital has not confirmed those allegations or that Wallstreet caused the disruption.
Article Details
- Victim Organization
- Cedar County Memorial Hospital
- Incident Type
- IT network disruption with a ransomware group's unverified claim of an attack and data theft
- Incident Date
- 2026-08-14
- Operational Impact
- IT outage affected the hospital and Medical Mall Clinic, making the electronic health record, patient portal, and internet access unavailable and disrupting transmission of diagnostic images. The emergency department partially diverted trauma and critical patients needing advanced imaging. Staff documented care manually; card payments were stopped. Most network and online systems returned within a week, while Meditech remained offline for two weeks. The hospital restored Meditech, electronic orders, and the patient portal on August 28, ended ambulance diversion, and later entered manually maintained records into the electronic system. Patient information impact remains undetermined.
- Ransom Or Extortion
- Wallstreet listed the hospital on its data-leak site on August 28 and provided access to files it claimed came from the hospital. The hospital has not confirmed the files' authenticity, data theft, or Wallstreet's responsibility; no ransom demand is reported.
- Claim Status
- claimed