Memorial Hospital and Manor

Summary

A ransomware attack disrupted the Electronic Health Record system at Memorial Hospital and Manor, discovered when virus protection software alerted employees to potential risks. The hospital initiated an internal investigation and transitioned to paper-based processes, which may result in longer patient wait times but is not expected to compromise care quality. Restoration and recovery efforts are currently being evaluated while the organization works to resolve the incident.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

On November 2, 2024, Memorial Hospital and Manor in Bainbridge, Georgia, discovered a ransomware attack targeting its Electronic Health Record (EHR) system during early Saturday morning operations. Hospital staff identified the incident through alerts generated by their virus protection software, which flagged potential risks in their network. Upon detection, the hospital immediately launched an internal investigation to assess the scope of the breach and initiated containment protocols. Administrators publicly confirmed the cyberattack via a Facebook post on November 3, emphasizing their commitment to transparency while assuring patients that care standards wouldn’t be compromised. The attack specifically disrupted digital patient record systems, forcing staff to transition to manual paper-based processes for clinical documentation and administrative workflows. Information technology teams began evaluating compromised systems to determine restoration feasibility, though no timeline for full recovery was provided.

The incident caused operational disruptions across both the main hospital facility and affiliated physician offices, with administrators warning patients to anticipate extended wait times due to the reliance on slower manual record-keeping methods. No data theft or patient safety compromises were reported in the initial disclosure. Hospital leadership focused resources on maintaining clinical operations while parallel recovery efforts progressed, though specific technical details about the ransomware variant, attack vector, or ransom demands remained undisclosed. Restoration priorities centered on EHR functionality, with no mention of ancillary systems being affected. The organization continued operating under emergency protocols as of the last public update, balancing patient care continuity with ongoing system recovery assessments.

Sources

Sources available to members: 1 source.