Susan B. Allen Memorial Hospital

Summary

Susan B. Allen Memorial Hospital detected anomalous activity within its network, prompting a system outage and an ongoing investigation supported by a third-party cybersecurity team. The incident was suspected to be a cyberattack after patients reported being unable to reach the facility to schedule critical appointments. The hospital stated it would promptly notify any patients whose personal information was compromised, while recovery efforts continued amid a broader trend of cyberattacks targeting healthcare providers nationwide.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

Susan B. Allen Memorial Hospital, located in El Dorado, Kansas, became the focus of a suspected cyberattack in mid-July 2025 after patients reported being unable to reach the facility to schedule critical medical appointments. On July 18, 2025, a local news outlet reported that the hospital had confirmed it had "detected anomalous activity" within its network, an event that triggered a broader system outage affecting normal operations. While the hospital did not publicly characterize the incident as a confirmed cyberattack at the time of reporting, the term "cyber attack" was used in the headline of the article covering the event, and the hospital acknowledged that abnormal network behavior had disrupted services. The detection of anomalous activity served as the initiating event, prompting the organization to initiate its incident response protocols and seek external assistance.

In response to the detected anomaly, the hospital engaged a third-party cybersecurity team to investigate the activity and assist with recovery operations. The hospital indicated that the investigation was ongoing at the time the news story was published, and officials stated they would notify patients immediately if it was determined that their personal information had been compromised during the incident. The article did not provide specifics about which network systems were affected, the duration of the outage, the nature of the anomalous activity, the identity of any threat actor, or whether any data was actually exfiltrated. The hospital's public statements focused on acknowledging the disruption, confirming that outside experts had been retained, and committing to direct communication with patients should the investigation reveal that personal information was exposed.

The incident at Susan B. Allen Memorial Hospital occurred within a broader context of increasing cyberattacks targeting healthcare providers across the United States. The article noted that the previous year, one of Wichita's largest hospitals had been affected by a similar incident, illustrating a pattern of healthcare organizations facing network intrusions and service disruptions. A cybersecurity expert interviewed for the story, Bill Ramsey, commented on the rising frequency of such attacks, noting that healthcare organizations are targeted because they possess both financial resources and are perceived as likely holders of cybersecurity insurance policies that may result in payouts to attackers. The article did not indicate whether ransomware, data theft, or another specific form of cyberattack was involved in the Susan B. Allen Memorial Hospital incident, nor did it provide details about the hospital's cybersecurity insurance status, financial impact, or recovery timeline.

At the time of reporting, the primary observable impact on patients was an inability to reach the hospital to schedule appointments, suggesting that telephone or network-based scheduling systems were among the affected services. The article did not specify whether electronic health records, clinical systems, billing systems, or other operational technology were impacted by the outage. The hospital's communications strategy at that point emphasized transparency about the anomaly while reserving further disclosure pending the outcome of the investigation by the third-party cybersecurity team.

Sources

Sources available to members: 1 source.