Cyber Incident Victim: AnMed
Date:
Jul 2026
Location:
United States of America
Summary
AnMed experienced a cyberattack that disrupted phone and internet services across all its hospital locations. The outage took MyChart offline, prevented patients from receiving paperwork, prompted diversion of some patients to nearby hospitals such as Prisma Greenville, and led to the postponement of a groundbreaking ceremony for its Education and Technology Center. The Anderson Police Department, South Carolina Law Enforcement Division, and the FBI’s Columbia field office are assisting with the ongoing investigation.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 0 motives | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On July 26, 2026, AnMed reported that all hospital locations were experiencing a phone and internet outage. The hospital system stated that care teams remained on site and continued to see patients in the emergency room. A recently discharged patient, who wished to remain anonymous, said they were unable to obtain any paperwork because MyChart was down. The patient described the environment as causing a lot of anxiety and noted that nobody knew who was behind the disruption. According to the patient, staff indicated that many patients were being transferred to Prisma Health in Greenville. An official with Medshore confirmed to FOX Carolina that patients were being diverted from AnMed to hospitals in Greenville. Despite the outage, the patient said they had a good experience at AnMed and praised the staff. The patient emphasized that the situation was beyond the hospital’s control. The outage affected communication systems and electronic health record access across the facility. The hospital system said it was working to restore services as quickly as possible.
AnMed released a statement confirming that the incident involved malware. Due to the cyberattack, the hospital postponed a groundbreaking ceremony scheduled for Tuesday for the AnMed Education and Technology Center, although construction remained on schedule. The Anderson Police Department confirmed that the South Carolina Law Enforcement Division (SLED) and the FBI were assisting with the investigation. The FBI’s Columbia field office said it was made aware of the cyber incident affecting AnMed on Sunday. The FBI indicated that additional details could not be provided because the matter was ongoing. No further specifics about the malware variant, attack vector, or data compromise were disclosed in the available source. The hospital continued to monitor the situation and coordinate with law enforcement partners. Efforts to restore phone and internet services were underway at the time of the report.