AnMed ransomware disrupts systems and patient care
Public report preview
AnMed experienced a ransomware incident beginning July 26, 2026, that disrupted its network, phones, internet access, electronic records and patient care across South Carolina and Georgia. Facilities closed, procedures were delayed and staff used downtime workflows; records, direct phones and limited MyChart access returned by August 12, but some services and portal functions remained unavailable August 14. Victim-specific Interlock negotiation access supports medium-confidence attribution, although a Gentlemen-branded claim remains unverified by AnMed.
- Organization
Recent incident intelligence
Paid member report preview
Unlock the complete incident report
New reports are available immediately to Sustainers, after 2 weeks to Supporters, and to everyone once they are more than 1 month old.
Sustainers help fund the research and verification behind the Cyber Incident Registry while receiving immediate access to new reports.
See something that needs correction?
Signed-in members can report an error, update, or missing source.