Cyber Threat Actor: Former Ashley County Medical Center employee

The threatactor is known publicly as a former employee of Ashley County Medical Center, specifically identified in reports as a nurse who worked at the facility. The individual’s location is tied to the United States, with the medical center situated in Ashley County, Arkansas. No additional aliases or personal identifiers have been disclosed in the available sources.

The actor’s activity was confined to the healthcare sector, targeting patient records within a single medical institution in the southeastern United States. Investigations conducted by Ashley County Medical Center determined that the unauthorized access was driven by curiosity rather than financial gain, espionage, or intent to disrupt operations, and that the viewed information was not shared or distributed outside the organization. This assessment of motive and impact is explicitly stated in the facility’s internal probe and the accompanying public release. The only publicly reported operation linked to this actor occurred on August 10 2020, when the medical center examined the former nurse’s access to the medical records of 772 patients. The review found that the accessed data were limited to viewing only, with no evidence of exfiltration, misuse, or further dissemination. No other campaigns, tools, malware families, or initial‑access vectors have been attributed to this individual in the open‑source record.

Given the singular nature of the incident, the actor’s profile remains defined by this isolated case of curiosity‑motivated unauthorized access within a U.S. healthcare setting, with no broader affiliations, state connections, or criminal consortium ties indicated by the disclosed information.