{"id":"cedar-county-hospital-cyberattack-aug-2026","category":"breach","status":"live","title":"Cedar County Memorial Hospital cyberattack: records restored after two weeks; patient-data review continues","tldr":"Cedar County Memorial Hospital restored electronic records on 28 August after a two-week outage. Unauthorised access is confirmed; patient-data exposure remains under review. Patients concerned they were affected can request free credit monitoring.","summary":"Cedar County Memorial Hospital in El Dorado Springs, Missouri, shut down its networks after detecting unusual activity on 14 August 2026. Its Meditech electronic health records stayed offline for two weeks, and some emergency patients needing advanced imaging were diverted elsewhere. Records, the patient portal and routine operations returned on 28 August. The hospital worked with forensic specialists and the FBI, and later confirmed it refused a ransom demand. Wallstreet claimed responsibility, but the reporting reviewed did not verify that attribution. An undated hospital notice available by 3 November confirms unauthorised access to information and possible exposure of names alongside identity numbers, medical details, billing or insurance information. The final scope and number of affected people have not been disclosed. The hospital says its review continues, promises direct notification to identified individuals and offers free credit monitoring to people who believe they were affected.","action":"If you or a relative used this hospital and believe you may be affected, call its incident helpline on 1-844-772-1430 to ask about free credit monitoring and identity protection. Review medical bills, insurance benefit statements and credit reports for unfamiliar activity. There is no device update to install for this incident.","product":"Cedar County Memorial Hospital and Medical Mall Clinic patient services","audience":"home","severity":"high","patch":"na","exploited":true,"cves":[],"tags":["cedar-county-memorial-hospital","healthcare","cyberattack","extortion","patient-data"],"affected":[],"fixed":[],"matches":[],"sources":[{"kind":"advisory","title":"Notification of Data Incident","url":"https://www.cedarcomem.com/getpage.php?name=Notice_of_Data_Incident","by":"Cedar County Memorial Hospital","date":""},{"kind":"advisory","title":"Cedar County Memorial Hospital Updates on IT Disruption","url":"https://www.cedarcomem.com/getpage.php?name=News-20260823-IT-Disruption-Update","by":"Cedar County Memorial Hospital","date":"2026-09-10"},{"kind":"post","title":"Cedar County Memorial Hospital Board Meeting Highlights Oncology Growth, Bed License Increase","url":"https://www.cedarcomem.com/getpage.php?name=News-20260928-September-Board-Meeting","by":"Cedar County Memorial Hospital","date":"2026-09-28"},{"kind":"post","title":"CCMH October Board Meeting Highlights Successful Inspections and Growth","url":"https://www.cedarcomem.com/getpage.php?name=News-20261031-October-Board-Meeting","by":"Cedar County Memorial Hospital","date":"2026-10-31"},{"kind":"news","title":"Hacking Group Claims Attack on Cedar County Memorial Hospital","url":"https://www.hipaajournal.com/cyberattack-cedar-county-memorial-hospital/","by":"HIPAA Journal","date":"2026-09-17"},{"kind":"news","title":"FBI investigating hospital IT disruption that took EHR offline for 2 weeks","url":"https://www.beckershospitalreview.com/healthcare-information-technology/cybersecurity/fbi-investigating-hospital-it-disruption-that-took-ehr-offline-for-2-weeks/","by":"Becker’s Hospital Review","date":"2026-09-15"},{"kind":"post","title":"News Updates from Cedar County Memorial Hospital","url":"https://www.cedarcomem.com/getpage.php?name=News&sub=News","by":"Cedar County Memorial Hospital","date":""}],"started":"2026-08-14","closed":null,"created":"2026-11-03T21:35:09.791Z","updated":"2026-11-03T21:35:09.791Z","cve_notes":[],"timeline":[{"at":"2026-11-03","added":"2026-11-03T21:25:43.261Z","kind":"other","text":"As checked on 3 November, an undated hospital notice confirms unauthorised access and possible exposure of identity, medical and insurance information. The review remains ongoing; direct notifications are promised and free credit monitoring is available to anyone who believes they were affected.","url":"https://www.cedarcomem.com/getpage.php?name=Notice_of_Data_Incident","by":"Cedar County Memorial Hospital","patch":null},{"at":"2026-10-31","added":"2026-11-03T21:25:43.261Z","kind":"other","text":"The hospital reported that staff had entered, coded and billed delayed charges during September to catch up after the August outage.","url":"https://www.cedarcomem.com/getpage.php?name=News-20261031-October-Board-Meeting","by":"Cedar County Memorial Hospital","patch":null},{"at":"2026-09-28","added":"2026-11-03T21:25:43.261Z","kind":"other","text":"Reporting on its 23 September board meeting, the hospital confirmed that cybercriminals demanded a ransom and it did not pay. Investigators were still examining what data might have been copied.","url":"https://www.cedarcomem.com/getpage.php?name=News-20260928-September-Board-Meeting","by":"Cedar County Memorial Hospital","patch":null},{"at":"2026-09-17","added":"2026-11-03T21:25:43.261Z","kind":"other","text":"HIPAA Journal reported that the Wallstreet ransomware group claimed responsibility and threatened to publish stolen data. The report said that claim remained unverified.","url":"https://www.hipaajournal.com/cyberattack-cedar-county-memorial-hospital/","by":"HIPAA Journal","patch":null},{"at":"2026-08-28","added":"2026-11-03T21:25:43.261Z","kind":"other","text":"Electronic health records and the patient portal returned, routine operations resumed and ambulance diversion ended. Staff still needed to enter records kept manually.","url":"https://www.cedarcomem.com/getpage.php?name=News-20260823-IT-Disruption-Update","by":"Cedar County Memorial Hospital","patch":null},{"at":"2026-08-23","added":"2026-11-03T21:25:43.261Z","kind":"disclosed","text":"The hospital publicly described the outage. Trauma and critically ill patients needing immediate advanced imaging were being diverted to neighbouring facilities because images could not reach radiologists.","url":"https://www.cedarcomem.com/getpage.php?name=News-20260823-IT-Disruption-Update","by":"Cedar County Memorial Hospital","patch":null},{"at":"2026-08-14","added":"2026-11-03T21:25:43.261Z","kind":"other","text":"Cedar County Memorial Hospital in Missouri detected a network disruption and shut down systems, interrupting electronic patient records and its patient portal.","url":"https://www.cedarcomem.com/getpage.php?name=News-20260823-IT-Disruption-Update","by":"Cedar County Memorial Hospital","patch":"na"}],"url":"https://hard.fyi/live/cedar-county-hospital-cyberattack-aug-2026/","json":"https://hard.fyi/api/live?id=cedar-county-hospital-cyberattack-aug-2026"}