Cedar County Memorial Hospital cyberattack: records restored after two weeks; patient-data review continues
Cedar County Memorial Hospital restored electronic records on 28 August after a two-week outage. Unauthorised access is confirmed; patient-data exposure remains under review. Patients concerned they were affected can request free credit monitoring.
If you or a relative used this hospital and believe you may be affected, call its incident helpline on 1-844-772-1430 to ask about free credit monitoring and identity protection. Review medical bills, insurance benefit statements and credit reports for unfamiliar activity. There is no device update to install for this incident.
What’s happening
Cedar County Memorial Hospital in El Dorado Springs, Missouri, shut down its networks after detecting unusual activity on 14 August 2026. Its Meditech electronic health records stayed offline for two weeks, and some emergency patients needing advanced imaging were diverted elsewhere. Records, the patient portal and routine operations returned on 28 August. The hospital worked with forensic specialists and the FBI, and later confirmed it refused a ransom demand. Wallstreet claimed responsibility, but the reporting reviewed did not verify that attribution. An undated hospital notice available by 3 November confirms unauthorised access to information and possible exposure of names alongside identity numbers, medical details, billing or insurance information. The final scope and number of affected people have not been disclosed. The hospital says its review continues, promises direct notification to identified individuals and offers free credit monitoring to people who believe they were affected.
- What
- Breach
- Affects
- Cedar County Memorial Hospital and Medical Mall Clinic patient services
- Fixed in
- Nothing to patch
- Since
- 14 Aug 2026
Timeline
- Update
As checked on 3 November, an undated hospital notice confirms unauthorised access and possible exposure of identity, medical and insurance information. The review remains ongoing; direct notifications are promised and free credit monitoring is available to anyone who believes they were affected.
- Update
The hospital reported that staff had entered, coded and billed delayed charges during September to catch up after the August outage.
- Update
Reporting on its 23 September board meeting, the hospital confirmed that cybercriminals demanded a ransom and it did not pay. Investigators were still examining what data might have been copied.
- Update
HIPAA Journal reported that the Wallstreet ransomware group claimed responsibility and threatened to publish stolen data. The report said that claim remained unverified.
- Update
Electronic health records and the patient portal returned, routine operations resumed and ambulance diversion ended. Staff still needed to enter records kept manually.
- Made public
The hospital publicly described the outage. Trauma and critically ill patients needing immediate advanced imaging were being diverted to neighbouring facilities because images could not reach radiologists.
- UpdateNothing to patch
Cedar County Memorial Hospital in Missouri detected a network disruption and shut down systems, interrupting electronic patient records and its patient portal.
Sources
- Notification of Data IncidentCedar County Memorial Hospital
- Cedar County Memorial Hospital Updates on IT DisruptionCedar County Memorial Hospital · 10 Sept 2026
- Cedar County Memorial Hospital Board Meeting Highlights Oncology Growth, Bed License IncreaseCedar County Memorial Hospital · 28 Sept 2026
- CCMH October Board Meeting Highlights Successful Inspections and GrowthCedar County Memorial Hospital · 31 Oct 2026
- Hacking Group Claims Attack on Cedar County Memorial HospitalHIPAA Journal · 17 Sept 2026
- FBI investigating hospital IT disruption that took EHR offline for 2 weeksBecker’s Hospital Review · 15 Sept 2026
- News Updates from Cedar County Memorial HospitalCedar County Memorial Hospital