A ransomware attack disrupted electronic health records and other systems at Memorial Hospital and Manor in Bainbridge, Georgia, in November 2024. The hospital detected unusual activity on Nov. 2, secured its network and brought in an independent cybersecurity firm. Its later public notice confirmed that an unauthorized actor had accessed and acquired personal and health information.
The initial disruption forced staff to use paper records. In its Nov. 3 report, WALB quoted the hospital warning that patients could face longer waits at the hospital and physician offices. The hospital said it believed the level and quality of care would be maintained. That assurance concerned continued care; it did not mean that normal electronic workflows were available.
The Hospital Authority’s financial statements for the year ended March 31, 2025 subsequently identified the event as ransomware. They said all systems were shut down and hospital duties, including financial recordkeeping, were handled manually. Management described work to stabilize operations, restore systems and strengthen controls. The statements also discussed a separate Change Healthcare disruption and an electronic health record implementation, so the year’s financial deterioration cannot be assigned entirely to this attack.
On Nov. 5, The Record reported that Embargo had claimed responsibility and threatened to release 1.15 terabytes of purportedly stolen data by Nov. 8. That volume and the group’s responsibility remain attributed claims. The hospital’s confirmation of unauthorized acquisition independently establishes data theft without validating every detail of the claim. No verified ransom amount or payment was established.
The hospital’s Feb. 7 notification letter said its review to identify affected people and information concluded Jan. 31. The information varied by person and could include names, Social Security numbers, birth dates, health insurance details and medical treatment or history. Letters went out Feb. 7, followed by the Feb. 10 public notice. The hospital reported the incident to the FBI and offered identity protection services.
The incident is presumed resolved. The reviewed statements describe restoration work but do not establish a precise final restoration date. Neither the January data-review milestone nor the February notification dates establish how long the systems outage lasted.
