Skip to content

Express Billing Systems ransomware incident

Public report preview

Express Billing Systems logo
Incident date

Ransomware encrypted Express Billing Systems' computer system in August 2026, prompting the billing provider to disable access and rebuild it with forensic investigators. Cognitive Behavior Therapy Center said patient information was stolen and some patients were directly targeted for extortion; WAVY reported approximately 1,500 patients affected. Operational disruption is presumed to have ended, but the restoration date and total provider-wide impact remain unknown.

Recent incident intelligence

Paid member report preview

Unlock the complete incident report

New reports are available immediately to Sustainers, after 2 weeks to Supporters, and to everyone once they are more than 1 month old.

Sustainers help fund the research and verification behind the Cyber Incident Registry while receiving immediate access to new reports.

See something that needs correction?

Signed-in members can report an error, update, or missing source.