A cyber incident at Minidoka Memorial Hospital in Rupert, Idaho, temporarily affected internal systems, limited imaging services and prompted transfers of some emergency patients, while the hospital and clinics continued treating patients. Full imaging access was restored by midnight April 19, 2026; a Blackwater leak-site claim alleging data theft remains unverified and was not confirmed by the hospital.
The organization publicly identifies the event as cyber-related. The organization publicly documents the resulting service disruption.
The incident is confirmed to be cyber-related, but the specific attack mechanism is unknown.
The incident is cyber-related, but available evidence does not establish whether or how data was affected.
A service, system, platform, or operational capability remained available only in part or with significant limitations.
Clinical, diagnostic, pharmacy, patient-care, medical-record, or other healthcare operations were materially affected.
The actor threatened to disclose, sell, distribute, or otherwise misuse stolen data unless the victim paid or complied with demands.
The actor explicitly threatened to publish or publicly release victim data or incident details.
The victim was listed on a threat actor or ransomware data-leak site as an alleged target or nonpaying victim.
The actor imposed a deadline or public countdown before increasing the demand, publishing data, deleting keys, or taking another threatened action.
Minidoka Memorial Hospital said an April 5, 2026, cyber incident temporarily affected systems within the organization, limited medical imaging and led to transfers of some emergency patients. Our reporting documented the disclosure and operational effects. DysruptionHub assesses with high confidence that a confirmed cyber incident caused a material but partial health care disruption because the affected organization directly characterized the event as cyber-related and described the resulting service limitations.
The hospital and its clinics continued treating patients using downtime procedures. Its official facility directory identifies operations in Rupert and an orthopedic and imaging clinic in Burley. Burley is included as a medium-confidence impacted location because the public statement described organizationwide system effects and clinic downtime procedures, but it did not identify a Burley-specific closure or imaging failure.
Limited imaging capability prompted transfers of some emergency patients, a clinically significant continuity-of-care effect, although the emergency department remained open and scheduled care continued. Minidoka Memorial said full imaging access would return by midnight April 19 and told patients to keep appointments unless contacted.
The hospital’s April 17 statement acknowledged the cyber incident, system effects, imaging limitations, patient transfers, downtime procedures, investigation and restoration target. DataBreaches.net reported that Blackwater listed Minidoka Memorial Hospital on April 17, claimed about 2.33 million files totaling roughly 576.6 GB and threatened publication after April 24. Comparitech separately documented the listing, alleged 577 GB theft and one-week demand.
The Blackwater listing is a stable external victim claim, not confirmed attribution. The hospital has not confirmed Blackwater involvement, ransomware, encryption, data theft or a ransom demand. The claim supports low ransomware and threat-actor confidence because it contains a public payment threat, while the actor report itself noted that no proof was supplied and no encryption was asserted.
The documented operational disruption is resolved. The hospital positively stated that full imaging access would be restored by midnight April 19 and that scheduled care should continue. Its investigation and any data-impact review may have continued after service recovery.
Confidence is high that the cyber incident temporarily affected systems and imaging and prompted patient transfers. Confidence is medium that the Burley clinic experienced incident-related system impact because it was part of the organization and the statement described affected organizational systems and clinic downtime procedures, but no site-specific effect was reported. Blackwater attribution, ransomware and the alleged data theft remain low confidence.
The public record does not establish the initial-access vector, compromised identity or host, vulnerability, malware, persistence, encryption, confirmed data access or exfiltration, exposed data categories, affected-person count, proof publication, direct demand amount, negotiation, payment, final attribution, law-enforcement findings or site-specific Burley service loss.
DataBreaches.net documented a Blackwater leak-site listing added April 17 that named Minidoka Memorial Hospital, alleged possession of about 2.33 million files totaling roughly 576.6 GB and threatened publication after April 24. The report said Blackwater supplied no proof and did not state that it encrypted data; the hospital has not confirmed the claim.
Minidoka Memorial Orthopedic Center and Imaging in Burley. The hospital described affected systems within the organization and said its clinics used downtime procedures, but it did not name a Burley-specific closure or imaging limitation.
The affected hospital is located in Rupert, Idaho.
DysruptionHub reported that an April 5 cyber incident affected internal systems and imaging at Minidoka Memorial Hospital, prompting some emergency-patient transfers while care continued. Imaging was restored by April 19, and the hospital had not disclosed a cause, ransomware involvement or confirmed data access.
Minidoka Memorial Hospital said an April 5 cyber incident temporarily affected certain internal systems, limited imaging services and led to transfers of some emergency patients. The hospital and clinics continued treating patients, and full imaging access was restored by midnight April 19.
Minidoka Memorial said a cyber incident affected systems within the organization; the hospital and clinics continued treating patients using downtime procedures, and full imaging access was expected by April 19.
DataBreaches.net reported finding a Blackwater leak-site listing on April 17 that alleged theft of 2,329,290 files totaling 576,599,359,488 bytes and threatened publication after April 24. The report said the actor supplied no proof and did not claim encryption.
Comparitech documented Blackwater’s April 17 leak-site listing, alleged 577 GB theft and one-week ransom deadline, while stating that the hospital had not confirmed the claim and the allegations could not be independently corroborated.
Official profile information supporting the public description of Minidoka Memorial Hospital.
Official geographic reference used with local and state material to verify place names, jurisdiction types and location context for , cassia, minidoka, burley, rupert.
Signed-in members can report an error, update, or missing source.
