CSIDB logo
Incident

Great Plains Health

Incident posture

Attack window
Nov 2019
Location
United States of America
Status
Historical
CIA posture
Available to members
Updated
2025-11-26 00:00

Linked entities

Victim
Great Plains Health
Threat actors
0 actors
Sources
1 source

Timeline

Occurred
Nov 2019
Discovered
Pending
Disclosed
Pending
Resolved
Pending

Summary

A ransomware attack impacted Great Plains Health, causing significant electronic health record system downtime. The incident disrupted hospital operations, forcing reliance on manual processes for an extended period. While specific details about data compromise remain unclear, the attack's effects necessitated prolonged recovery efforts to restore critical IT infrastructure and patient care systems.

Motives

Detailed motive labels are available to members.

1 motive

TTPs

Detailed technique labels are available to members.

1 technique

Description

Great Plains Health in Nebraska was hit by a ransomware attack, forcing the hospital to launch downtime procedures and cancel non-emergency appointments due to the attack and weather-related concerns. The hospital's IT systems, including electronic health records and communication, were severely disrupted. The cybersecurity team, with assistance from the FBI and State Patrol, is investigating the incident to determine the source of the ransomware. The hospital continues to operate using paper forms and is working to recover its systems. Patients were notified to reschedule non-emergency appointments, and the hospital is operating under downtime procedures to manage the situation. Email and traditional communication systems remain down, and officials stated it could take days or even months to fully recover. The hospital is the second ransomware outage reported in the past week, following a cyberattack on IT vendor Virtual Care Provider that affected at least 110 nursing homes and their affiliated facilities.

Sources

Sources available to members: 1 source.

CSIDB